Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987226 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when btinit fails btinit calls btledsinit to register led, but if ...

PT-2025-41069

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2+ 6 Description A flaw exists in the Linux kernel's i915/gvt component related to the handling of debugfs cleanup during vgpu removal. Specifically, the code does not carefully check for the availability...

PT-2025-41082

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue in the octep probe function. If the function fails to retrieve a device's MAC address, it exits while leaving a delayed work item, intr...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-399433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-399433 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987343 advisory. In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414463 advisory. Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986418 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qibusersdmaqueuepkts The wrong goto label was used for the error case...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-407532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-407532 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: stop waiting for space when jbd2cleanupjournaltail returns error In jbd2logwaitforspace, we...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-394085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394085 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanupbearer. syzkaller reported a use-after-free o...

kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

LionCoders SalePro POS 安全漏洞

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.4.8, which stems from improper cleanup of the customer name parameter and could lead to a stored cross-site scripting...

The vulnerability of the xmldbc() function in D-Link DSL-7740C router software allows attackers to enhance their privileges.

The vulnerability of the xmldbc function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Fixed in Apache Tomcat 9.0.110

Low: Delayed cleaning of multipart upload temporary files may lead to DoS CVE-2025-61795 If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to local storage were not cleaned up immediately but left for the...

SUSE CVE-2022-50474

In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macioaddonedevice Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically. It needs to be freed when ofdeviceregist...

SUSE CVE-2022-50482

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was seen with a kernel prior to commit ee2653bbe89d "iommu/vt-d: Remove domain and devinfo mempool" when there was a failure in initdmars,...

SUSE CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtwcoredeinit', shrink critical section in the latter by freeing...

SUSE CVE-2023-53594

In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in deviceadd When calling kobjectadd failed in deviceadd, it will call cleanupgluedir to free resource. But in kobjectadd, dev-kobj.parent has been set to NULL. This will cause resource leak. The...

SUSE CVE-2023-53606

In the Linux kernel, the following vulnerability has been resolved: nfsd: clean up potential nfsdfile refcount leaks in COPY codepath There are two different flavors of the nfsd4copy struct. One is embedded in the compound and is used directly in synchronous copies. The other is dynamically...

[SECURITY] Fedora 41 Update: containernetworking-plugins-1.8.0-2.fc41

Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...

[SECURITY] Fedora 42 Update: containernetworking-plugins-1.8.0-2.fc42

Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...