Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990276 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989069 advisory. In the Linux kernel, the following vulnerability has been resolved: media: irtoy: free before error exiting Fix leak in error path. Tenable has extracted the precedi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989133)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989133 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: fix memory leak in rdsrecvmsg Syzbot reported memory leak in rds. The problem was in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990048 advisory. In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error occurs in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989379)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989379 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10ksetupmsaresources The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989699 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sam9x5wm8731driverprobe The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988905 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 usb: musb: musbdsps: requestirq aft...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989638 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix tag leaks on error In pm8001chipsetdevstatereq, pm8001chipfwflashupdatereq,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989246 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fix potential memory leak about jitdata Make sure to free jitdata through kfree in the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989190 advisory. In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: nbd: Fixed an UAF in nbdgenlconnect, where an error path occurred after calling nbdstartdevice. There is a use-after-free issue in nbd: - block nbd6: Received control failed result: -104; sockets are being shut down. Bug: KASAN:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm: Another leak in the submit error path has been fixed. putunusedfd does not free the allocated file if we have already performed fdinstall. Therefore, we also need to free the syncfile. Patchwork:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Staging: fbtft: fixed a potential memory leak in fbtftframebufferalloc. In the error paths after the fbinfo structure is successfully allocated, the memory allocated in fbdeferredioinit for info-pagerefs is not freed. This issue...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: The affinity hint was cleared before calling ath12kpcifreeirq in the error path. If a shared IRQ is used by the driver due to platform limitations, then the IRQ affinity hint is set correctly after the allocation of...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: crypto: sun8i-ce-cipher – Fixed error handling in sun8icecipherprepare. Fixed two DMA cleanup issues on the error path in sun8icecipherprepare: 1. If dmamapsg fails for areq-dst, the device driver will attempt to free DMA memo...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fixed a fence leak in the submit error path. In error paths, we could unreference the submitted entity without calling drmschedentitypushjob. As a result, msmjobfree will never be called. Since drmschedjobcleanup will NU...

EUVD-2023-60041

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

UBUNTU-CVE-2025-40101

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

SUSE CVE-2025-40069

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

Siemens SIMATIC Devices Incomplete Cleanup (CVE-2024-38612)

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case CONFIGIPV6SEG6LWTUNNEL is not defined. In that case if seg6hmacinit fails, the genlunregisterfamily isn't called. This issue exist since comm...