WordPress WP Count Down Timer plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WP Count Down Timer versions = 1.0.1...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

RLSA-2025:19105 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry CVE-2025-39730 kernel: ALSA: hda/ca0132: Fix buffe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990412)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990412 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990579 advisory. In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399dmc: Disable edev on remove Otherwise we hit an unablanced enable-count when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990410 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubpro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990569 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990334 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 xfrm: Force ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988880 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pcigetdomainbusandslot says, it returns a P...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988795 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered wh...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989846 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989480 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989175 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues The cited commit creates child PKEY...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990005 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbdallocconfig and module removal When nbd module is being removing,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990340 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989219 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on totaldatablocks As Yanming reported in bugzilla:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989676 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gart.bo pincount leak gmcv9,100gartdisable isn't called matched with correspoding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989903 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989022 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in hasexternalpci foreachpcidev is implemented by...