Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: The value of UnboundedRequestEnabled was checked. The UnboundedRequestEnabled parameter in CalculateSwathAndDETConfigurationparamsst is a pointer i.e., dmlboolt UnboundedRequestEnabled. Therefore, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013270 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in skbtstamptx Commit 50749f2dd685 tcp/udp: Fix memleaks of sk and zerocopy skb...

EUVD-2026-16595

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a...

CVE-2026-1496

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a...

CVE-2026-1496 Coverity CLI Authentication Bypass

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a...

CVE-2026-1496 Coverity CLI Authentication Bypass

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a...

CVE-2026-1496

Coverity Connect CLI authentication bypass (CVE-2026-1496) affects vulnerable versions of Coverity Connect. The root cause is a missing error handler in the authentication logic for command line tooling, enabling an attacker with access to the /token endpoint to craft a request that bypasses auth...

CVE-2026-1496

Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a...

PT-2026-28312

Name of the Vulnerable Software and Affected Versions Coverity Connect affected versions not specified Description The authentication logic in the command line tooling for Coverity Connect is missing an error handler, leading to a potential authentication bypass. An attacker with access to the...

Synopsys Coverity Connect 安全漏洞

Synopsys Coverity Connect is a web-based platform provided by Synopsys, Inc. It primarily consists of static code analysis tools and dynamic code analysis tools. Synopsys Coverity Connect has security vulnerabilities; one of these vulnerabilities stems from the identity verification logic in the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005116 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check BIOS images before it is used BIOS images may fail to load and null checks...

CVE-2018-1000104

A plaintext storage of a password vulnerability exists in Jenkins Coverity Plugin 1.10.0 and earlier in CIMInstance.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser e.g. malicious extension to retrieve the configured keystore and priva...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992947 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992715 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing them WHAT & HOW amdgpudm can pass a null stream to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992771 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbsclsetscalerfilter if filter is null Callers can pass null in filter i.e...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993103 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked...

UBUNTU-CVE-2022-50882

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvcgpioparse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it...

UBUNTU-CVE-2022-50784

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...

CVE-2022-50784

The CVE-2022-50784 issue affects the Linux kernel in the wifi/iwlwifi/mei path, where a NULL-pointer dereference can occur after attempting to clone an SKB. If SKB cloning fails, the code may proceed to use the invalid SKB instead of aborting, risking a system crash or instability. The vulnerabil...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990840 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fwinfo is not null before using it This resolves the dereference null retu...