Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986454 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987190 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: Skip non-Ethernet packets Currently tcfskbmodact assumes that packets use...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414530 advisory. A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987359 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987345 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986437 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller reset during load Unlike .queuerq, in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986995 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gicpopulateppipartitions offindnodebyphandle returns a node...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-404116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-404116 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3request-numqueuedsgs is decremented o...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-559572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-559572 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcantxhandler: fix use after free of skb canputechoskb will clone skb then free the sk...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986797 advisory. In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrxregister It causes NULL pointer dereference when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387146 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986706 advisory. In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in emspcmciaaddcard If the last channel is not available then de...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414581 advisory. .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414583 advisory. A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414578 advisory. A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by t...

CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

EUVD-2025-32485

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11320

CVE-2025-11320 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in the uploadFile function in src/main/java/com/education/core/controller/UploadController.java, where improper handling/manipulation of the File argument enables unrestricted file upload. Remote exploita...