Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988833)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988833 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

CVE-2025-35021

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections...

PT-2025-44807

Name of the Vulnerable Software and Affected Versions Abilis CPX affected versions not specified Description An attacker can gain access to a restricted shell on an unconfigured Abilis CPX device by repeatedly failing to authenticate via SSH. Specifically, after three unsuccessful authentication...

The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software tool, allows a malicious individual to gain access to confidential information or cause system failures.

The vulnerability of the cuobjdump utility, a software tool for parallel computing on NVIDIA CUDA GPUs, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to access confidential information or cause system failures...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix missing lookup table cleanups When a virtuser device is created via configfs and the probe fails due to an incorrect lookup table, the table is not removed. This prevents subsequent probe attempts from...

The vulnerability of the U-Boot loader, related to writing beyond the buffer boundaries, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the U-Boot loader, related to uncontrolled recursion, allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the U-Boot loader is related to uncontrolled recursion. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the rpc_lookupreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the rpclookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer out-of-buffer writing. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the driver/usb/gadget/f_dfu.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability in the driver/usb/gadget/fdfu.c file of the U-Boot loader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause system failures...

The vulnerability of the memset() function in the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the memset function in the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures through a specially created ext4 file...

The Microsoft Azure Outage Shows the Harsh Reality of Cloud Failures

The second major cloud outage in less than two weeks, Azure’s downtime highlights the “brittleness” of a digital ecosystem that depends on a few companies never making mistakes...

coresight: trbe: Return NULL pointer for allocation failures

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing dirty page tracking when the IOMMU is in non-consistent mode, which could lead to unrecoverable...

The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the smb component in Linux operating systems is related to the tracking of UNIX symbolic links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ProFTPD FTP server, related to errors in the authentication process, allows attackers to manipulate data.

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the `load_global_roots_objectid` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the loadglobalrootsobjectid function in the Linux operating system’s kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the ProFTPD FTP server, related to errors in the authentication process, allows attackers to manipulate data.

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...

The vulnerability of the `build_sit_entries` function in the Linux operating system, which allows a hacker to trigger a service failure

Vulnerability of the buildsitentries function in the Linux operating system’s kernel, where resources are not properly cleaned or released. Exploiting this vulnerability can allow an attacker to cause service failures...

kernel: Linux kernel: Denial of Service via resource leak in SMB2 compound operations

A flaw was found in the Linux kernel. An inconsistent update of the reference count in the smb2compoundop function, particularly during memory allocation failures, could lead to resource leaks. A local attacker could exploit this to cause a Denial of Service DoS by exhausting system resources...