CVE-2025-68192 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

PT-2025-51605

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.34-gbe78e49cb433 Description The Linux kernel contains a flaw within the USB qmi wwan component related to the initialization of the MAC header offset in the qmimux rx fixup function. Raw IP packets lack a M...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46747)

HID: cougar: slab-out-of-bounds Read in cougarreportfixup. Reportfixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990839)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990839 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990448 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfbwrite When the sm712fb driver writes three bytes to the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988804 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179178a: Fix out-of-bounds accesses in RX fixup ax88179rxfixup contains several...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989911 advisory. In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989366 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfbwrite When the sm712fb driver writes three bytes to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989526 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfbwrite When the sm712fb driver writes three bytes to the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987646)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987646 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup aqc111rxfixup contains several...

JLSEC-2025-79 In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer...

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c...

CVE-2025-22833

CVE-2025-22833 (AMI APTIOV BIOS) : A vulnerability in the BIOS of AMI APTIOV firmware allows a local attacker to trigger a buffer copy that does not validate input size, potentially enabling arbitrary code execution. Affected component: APTIOV BIOS/firmware. Impact (per sources): high confidentia...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987254 advisory. In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986704 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179178a: Fix out-of-bounds accesses in RX fixup ax88179rxfixup contains several...

EUVD-2025-5277

Malicious code in bioql PyPI...

The vulnerability of the __runtime_fixup_32() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the runtimefixup32 function in the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-39806

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...

UBUNTU-CVE-2025-39806

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...

CVE-2025-39806 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...