CVE-2025-43446

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify protected parts of the file system...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990177 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989876 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtreet for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988919 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfsreadinodemount invokes ntfsmallocnofs with zero...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989943 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix reference count leaks in nfs42proccopynotify You don't often get email from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989285)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989285 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon ext4mbuseinodepa Hulk Robot reported a BUGON:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989799 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989770 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix iasize underflow iattr::iasize is a lofft, which is a signed 64-bit type. NFSv3 and NFS...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988914 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on curseg-alloctype As Wenqing Liu reported in bugzilla:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990280)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990280 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the sizecheck label in eaget, the code checks i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989470 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989219 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on totaldatablocks As Yanming reported in bugzilla:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988943 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990358 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989030 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989763 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: remove clear SBINLINECRYPT flag in defaultoptions In f2fsremount, SBINLINECRYPT flag will b...

The vulnerability of the nfs_pageio_do_add_request() function in the fs/nfs/pagelist.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the nfspageiodoaddrequest function in the fs/nfs/pagelist.c module of the Linux file system support module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the nfs_pageio_doio() function in the fs/nfs/pagelist.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the nfspageiodoio function in the fs/nfs/pagelist.c module of the Linux file system support module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the netfs_init() function in the fs/netfs/main.c module, which supports the network file system in Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the netfsinit function in the fs/netfs/main.c module, which supports the network file system in Linux operating systems, is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service...

The vulnerability of the btrfs_rename_exchange() function in the fs/btrfs/inode.c module of the file system support module for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfsrenameexchange function in the fs/btrfs/inode.c module of the btrfs file system support module in Linux systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...