Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986377 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in sndsocputvolswsx The bounds checks in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986924 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ttybuffer: Fix the softlockup issue in flushtoldisc When running ltp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rpm (UTSA-2025-680608)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680608 advisory. It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-416978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416978 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If thi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-429739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-429739 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable use...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987172 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: niusb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986735 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added to verif...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986459 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added to verif...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to properly check boundaries when setting up a channel, which could lead to out-of-bounds writes...

PT-2025-41088

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc4-syzkaller Description The Linux kernel radio-shark2 driver did not validate the presence and type of endpoints it utilized. This could lead to a WARNING message during operation, as identified by the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986388 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-381976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381976 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG and diAlloc In dbNextAG , there is no check for the case where...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987022 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid WARNON timing related checks The soft/batadv interface for a queued OGM can be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986965 advisory. In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987436 advisory. Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed websi...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the nfsd4decodecompound function that does not perform range checking, which could lead to out-of-bounds rea...

CVE-2025-61777 FlagForge Allows Unauthenticated Badge Template API Access

Flag Forge is a Capture The Flag CTF platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates GET and /api/admin/badge-templates/create POST endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized user...

UBUNTU-CVE-2025-59730

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...

CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...

CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...