Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989447 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx4en: Fix an use-after-free bug in mlx4entryallocresources In mlx4entryallocresources,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989471 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in sndseqexpandvarevent With clang's kernel control fl...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988746 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Clear prog-jitedlen along prog-jited syzbot reported an illegal copytouser attempt fr...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988727 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: protect flwalk with rcu Patch that refactored flwalk to use...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990229 advisory. In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990191 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...

MantisBT < 2.27.2 Unauthorized Disclosure (GHSA-g582-8vwr-68h2)

The version of MantisBT installed on the remote host is prior to 2.27.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-g582-8vwr-68h2 advisory. - Due to insufficient access-level checks, any non-admin user having access to manageconfigcolumnspage typically project manage...

CVE-2025-62520

CVE-2025-62520 concerns MantisBT prior to 2.27.2. The issue arises from insufficient access checks in manage_config_columns_page.php, allowing any non-admin user with access to that page to use Copy From to retrieve the columns configuration from a private project they should not access. Affected...

CVE-2025-54331

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of srchdr in the copyncpheader function...

CVE-2025-54331

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of srchdr in the copyncpheader function...

PT-2025-45022

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 through July 2025 Description An issue exists in the NPU component of Samsung Mobile Processor Exynos. Specifically, an untrusted pointer dereference of src hdr occurs within the copy ncp header function...

CVE-2025-54331

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of srchdr in the copyncpheader function...

SAMSUNG Mobile Processor Exynos 安全漏洞

SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos due to an untrusted pointer dereference in the copyncpheader function...

Improper Authorization

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Improper Authorization due to insufficient access-level checks in the manageconfigcolumnspage.php. An attacker can retrieve configuration details from private projects by using the 'Copy From'...

GHSA-G582-8VWR-68H2 MantisBT unauthorized disclosure of private project column configuration

Impact Due to insufficient access-level checks, any non-admin user having access to manageconfigcolumnspage.php typically project managers having MANAGER role can use the Copy From action to retrieve the columns configuration from a private project they have no access to. Access to the reverse...

MantisBT unauthorized disclosure of private project column configuration

Impact Due to insufficient access-level checks, any non-admin user having access to manageconfigcolumnspage.php typically project managers having MANAGER role can use the Copy From action to retrieve the columns configuration from a private project they have no access to. Access to the reverse...

PT-2025-44805

Name of the Vulnerable Software and Affected Versions MantisBT versions 2.27.1 and below Description Mantis Bug Tracker MantisBT is an open source issue tracker. Insufficient access-level checks allow a non-admin user with access to the manage config columns page.php page to retrieve the columns...

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

...

CVE-2025-57108

Kitware VTK Visualization Toolkit contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupte...

CVE-2025-57107

Kitware VTK Visualization Toolkit contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...