CVE-2025-69654

A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 2025-12-11,qjs interpreter using the -m option and a low memory limit can cause an out-of-memory condition followed by an assertion failure in JSFreeRuntime...

CVE-2026-27750 Avira Internet Security Optimizer TOCTOU

Avira Internet Security contains a time-of-check time-of-use TOCTOU vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005779 advisory. In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macioaddonedevice Afer commit 1fa5ae857bb1 driver core: ge...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005701 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocate...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005734 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005754 advisory. In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfreescalethread threads after unloading rcuscale Running the 'kfreercutest'...

LSN-0118-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption large read crashes with a slab-use-after-free way down in the crypto API. In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF fo...

SUSE-SU-2026:20644-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel bsc1249205. - CVE-2025-39698: iouring/futex: ensure iofutexwait...

SUSE-SU-2026:20635-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel bsc1249205. - CVE-2025-39698: iouring/futex: ensure iofutexwait...

K000160227: Linux kernel vulnerability CVE-2025-37849

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvmarchvcpucreate fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data...

ROS-20260304-73-0010

A vulnerability in the ufshcderrhandlingprepare function of the Linux operating system kernel is related to incorrect resource sweeping or freeing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005498 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005632 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was seen...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

MAL-2026-1192 Malicious code in chai-as-proofed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f83db1fa5312f0e34beebb192fb972f2d0e88650b49945571b438d27156de06 The package chai-as-proofed was found to contain malicious code. Source: ghsa-malware b69ea2b92d530f84e379af75eaaefcf70c71f603a5bb307eb7e658b4b290db8...

Malicious code in polygon-bitquery-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6daf4d1c0048da15a68fd80e8793122e363078d90c68f3d596760c5ca0156 The package polygon-bitquery-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in turbo-json-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a239b53ed6cbc1e72aac660afa08204b9de36dae39068c30cf175ddd390b4fd1 The package turbo-json-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in @zakhaevv/envai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4de2673a9f50b205b51474085ef3eb3e78f06618873183038582fb48bacfe The package @zakhaevv/envai was found to contain malicious code. Source: ghsa-malware 12157c0eeb0adb6f316ee9f171691ae08e204ec84f3ad7dabf9213e2af244b7...