Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000378 advisory. An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasascreateframepool fails in megasasalloccmds in...

PT-2026-1551

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE400 version 1.1.0 Build 20250710 rel.14914 Description A flaw exists in the 802.11 modules of the TP-Link Archer BE400 that can lead to a denial-of-service DoS condition. An attacker in close proximity can trigger a device...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000511 advisory. An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511modeinitregs and ov518modeinitregs...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000373 advisory. An issue was discovered in the Linux kernel before 5.0.11. fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c has a NULL pointer dereference because the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000282 advisory. drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. Tenable has extracted...

RockyLinux 8 : mingw packages (RLSA-2021:1968)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1968 advisory. sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2019-16168 sqlite: Integer overflow in sqlite3strvappendf function in printf.c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000271 advisory. drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000472 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

CVE-2025-47380 Untrusted Pointer Dereference in Camera

Memory corruption while preprocessing IOCTLs in sensors...

CVE-2025-47380

CVE-2025-47380 is a memory corruption vulnerability in the sensors component that occurs during preprocessing of IOCTLs. Affected: the sensors functionality; root cause reported as memory corruption during IOCTL preprocessing. Documented impact indicates high severity with full confidentiality, i...

CVE-2025-47343 Untrusted Pointer Dereference in Video

Memory corruption while processing a video session to set video parameters...

CVE-2025-47343

CVE-2025-47343 describes a memory corruption vulnerability in Qualcomm chipsets that occurs while processing a video session to set video parameters. The weakness affects the video parameter handling path, with a local attack vector and high impact on confidentiality, integrity, and availability ...

CVE-2025-52516

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service...

SUSE CVE-2025-68752

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

iccDEV 代码问题漏洞

iccDEV is an open source color configuration code library from the International Color Consortium ICC. A code issue vulnerability exists in versions of iccDEV prior to 2.3.1.2, which stems from the presence of a null-pointer member call that could result in a null-pointer dereference...

CVE-2025-68752

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

CVE-2025-68752

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

UBUNTU-CVE-2025-68752

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

CVE-2025-68752 iavf: Implement settime64 with -EOPNOTSUPP

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

PHP 8.4.x < 8.4.16 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.2.x prior to 8.2.30, 8.3.x prior to 8.3.29, 8.4.x prior to 8.4.16, or 8.5.x prior to 8.5.1. It is, therefore, affected by multiple vulnerabilities: - Information leak of memory in getimagesize...