62963 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006962)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006962 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010881)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010881 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fwin...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013262)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak For some sev ioctl...
PT-2026-34016
🚨CVE CVE-2026-38834 Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do ping action function via the hostName parameter. This vulnerability allow… https://t.co/tKrNtNWoPC ----- Traducción: Se encontró que CV… https://t.co/utmtNgl3sv...
CVE-2026-1354: Key Exchange without Entity Authentication
Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a device with the motorcycle via Bluetooth. Once paired, an attacker can utilize over-the-air firmware updating functionality to potentially upload malicious firmware to the motorcycle. The motorcycle must first b...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007000)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007000 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/rtasflash: allow user copy to flash block cache objects With hardened usercopy enabled...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006903)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006903 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013167)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013167 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fwgetenv will use env entry to determine style of en...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011056)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011056 advisory. In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, t...
PT-2026-46981
Name of the Vulnerable Software and Affected Versions 7-Zip versions 9.21 through 26.00 Description An off-by-one out-of-bounds read exists in the ParseDepedencyExpression function of the UEFI firmware image parser. The issue occurs because the function validates an attacker-controlled opcode byt...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010997)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010997 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpifirmwareprobe In rpifirmwareprobe, if...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010711)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010711 advisory. Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privilege...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010924)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010924 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011023)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011023 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010871)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010871 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a...
EUVD-2026-23954
A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...
CVE-2026-29642
A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...
EUVD-2026-23750
SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue on firmware maintenance. Arbitrary file may be uploaded on the device without authentication...