PT-2025-52903

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0+ 3 Description The Linux kernel contains a race condition within the macintosh/mac hid subsystem, specifically in the mac hid toggle emumouse function. This issue arises when multiple processes concurrently...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990389 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implemen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990439)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990439 advisory. In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990435 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopffinit only checks the total sum of the report...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988964 advisory. In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989810 advisory. In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989937 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported shift-out-of-bounds in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988895 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through uhid, there is ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990289 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implemen...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989037 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fix possible memory leak in mousevscprobe If hidadddevice returns error, it should...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988715 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betopprobe Syzbot reported slab-out-of-bounds Write b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989798 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implemen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989684 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocat...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989295 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free rawreport buffers in usbhidstop Free the unsent rawreport buffers when the devi...

CVE-2025-43424

The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1. A malicious HID device may cause an unexpected process crash...

kernel: HID: core: Harden s32ton() against conversion to 0 bits

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...

CLSA-2025-1762171389 kernel: Fix of 15 CVEs

nfs: fix possible null-ptr-deref when parsing param CVE-2022-50455 - KVM: arm64: Disassociate vcpus from redistributor region on teardown CVE-2024-40989 - HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 - ALSA: usb-audio: Validate UAC3 cluster segment descriptors...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: Quirks – Added quirks for 2 Chicony Electronics HP 5MP cameras The Chicony Electronics HP 5MP cameras USB IDs: 04F2:B824 & 04F2:B82C report a HID sensor interface that is not actually implemented. Attempting to access this...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: apple: The feature-report field count is validated to prevent NULL pointer dereferencing. A malicious HID device with the APPLEMAGICBACKLIGHT quirks can trigger a NULL pointer dereference when the power feature-report is...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: HID: usbhid: Eliminated a recurring out-of-bounds bug in usbhidparse. Updated the struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor according to the USB HID 1.11 specification. Note:...