Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992522 advisory. A race condition was found in the Linux kernel's drm/exynos device driver inexynosdrmcrtcatomicdisable function. This can result in a null pointer dereference issue,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition in the i915perfaddconfigioctl function that could lead to reuse after release...

PT-2025-54026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A fix for a Bluetooth use-after-free issue in the btsdio module was reverted due to a potential null-pointer-dereference problem introduced by the patch. The original bug was addressed b...

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992524 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992624 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992480 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: fix race on RX DMA shutdown From time to time DMA completion can come in...

PT-2025-53861

Name of the Vulnerable Software and Affected Versions PHPEMS versions prior to 11.1 Description A race condition exists in the Coupon Handler component of PHPEMS. This issue can be exploited remotely, though the complexity of an attack is considered high and exploitability is difficult. The explo...

PT-2025-54182

Name of the Vulnerable Software and Affected Versions Anritsu ShockLine affected versions not specified Description A network-adjacent attacker can execute arbitrary code on affected installations of Anritsu ShockLine without authentication. The issue stems from a race condition within the SCPI...

PT-2025-54113

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908 enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992187 advisory. In the Linux kernel, the following vulnerability has been resolved: mm,hugetlb: take hugetlblock before decrementing h-resvhugepages The h-hugepages counters are...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992266 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/active: Fix misuse of non-idle barriers as fence trackers Users reported oopses on list...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992338 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition In btsdioprobe, t...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the dprintcompinner function in the cp-demangle.c file. An attacker can cause the application to crash or become unresponsive by submitting a specially crafted PE file. Remediation There is no fixed version...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview @nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework @platform-fastify Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the URL encoding middleware, allowing it to be bypassed in certain configurations. An...

CVE-2025-15116

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing a manipulation results in race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The...

ThroughTheLookingGlass

Technical Write-up: TTY LDisc Race to Kernel Execution Hijack...

Race Condition

Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to Race Condition via the Single-Use Coupon Handler. An attacker can redeem a single-use coupon multiple times by exploiting a timing issue during concurrent requests. Remediation There is no fix...

EUVD-2025-205489

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing manipulation results in race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The...

CVE-2025-15116

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing a manipulation results in race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The...

CVE-2025-15116

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing a manipulation results in race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The...