Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414609 advisory. An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987004 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe failed I got a null-ptr-deref report as following when...

EUVD-2025-20965

Malicious code in bioql PyPI...

EUVD-2022-15991

Malicious code in bioql PyPI...

EUVD-2024-22218

Malicious code in bioql PyPI...

EUVD-2024-53757

Malicious code in bioql PyPI...

EUVD-2024-19164

Malicious code in bioql PyPI...

EUVD-2022-41733

Malicious code in bioql PyPI...

EUVD-2023-26188

Malicious code in bioql PyPI...

EUVD-2024-22224

Malicious code in bioql PyPI...

EUVD-2025-13131

Malicious code in bioql PyPI...

EUVD-2021-7123

Malicious code in bioql PyPI...

EUVD-2024-20715

Malicious code in bioql PyPI...

CVE-2023-53512

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree...

SUSE CVE-2025-39726

In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driv...

crypto: ccp - Fix crash when rebind ccp device for ccp.ko

...

CVE-2025-36900

In lwistestregisterio of lwisdevicetest.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

USN-7737-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; -...

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

kernel: drivers:md:fix a potential use-after-free bug

A use-after-free bug exists in the linux kernel such that in the line "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if sh-batchhead && sh != sh-batchhead" resulting in a minor application crash...