Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990313 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schtaprio: fix possible use-after-free syzbot reported a nasty crash 1 in nettxaction...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990186 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989135 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly strange API...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990251 advisory. In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUGON in control parser Fix a BUGON from 2009. Even if it looks unreachable I...

CVE-2025-54333

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the getvs4lprofilernode function...

CVE-2025-54333

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the getvs4lprofilernode function...

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

CVE-2025-47362

Information disclosure while processing message from client with invalid payload...

CVE-2025-47368

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47370

Technical details, affected product/versions, root cause, and fixes for CVE-2025-47370 are not publicly provided in the supplied documents. Monitor for updates from vendors/security bulletins.

CVE-2025-47370 Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47368

CVE-2025-47368 affects Qualcomm DSP Service (Memory corruption in MCDM IOCTL processing when dereferencing an invalid userspace address in a user buffer). The CVSS v3.1 vector indicates a Local, Low-Complexity exploit with Low Privileges Required, no user interaction, and impacts on confidentiali...

CVE-2025-47362

CVE-2025-47362 affects an Automotive Software platform based on QNX . The issue is an information disclosure triggered by processing a client message with an invalid payload, attributed to a buffer over-read in the affected software component. Documented impact indicates high confidentiality risk...

CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload...

SUSE CVE-2025-57109

Kitware VTK Visualization Toolkit 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses string members of mesh objects that have been previously freed during actor import operations...

CVE-2025-54333

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the getvs4lprofilernode function...

PT-2025-44929

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description An information disclosure issue exists when processing messages from a client with an invalid payload. The issue involves a buffer over-read. Recommendations...

PT-2025-49093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur in the cros ec keyb process function when receiving an EC MKBP EVENT KEY MATRIX event. This happens if cros ec...