Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988723 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. Submitting a cs with 0 chunks, caus...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990020 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989874 advisory. In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989169 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput on failed usercopy If the copy back to userland fails for the...

CVE-2025-47368

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47367 Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing...

CVE-2025-47368: Buffer Over-read

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47367: Out-of-bounds Write

Memory corruption while accessing a buffer during IOCTL processing...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fixed potential out-of-bounds read/write access. When using publicly available tools like ‘mdio-tools’ to read/write data from/to network interfaces via mdiobus, there is no verification of the parameters passed to t...

CVE-2025-61156

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

CVE-2025-61156: Improper Access Control

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

UBUNTU-CVE-2025-40031

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

Hotta Studio GameDriverX64.sys 安全漏洞

Hotta Studio GameDriverX64.sys is the underlying driver file for a game from Hotta Studio China. A security vulnerability exists in Hotta Studio GameDriverX64.sys version 7.23.4.7, which stems from improper handling of specially crafted IOCTL requests and could lead to a denial of service attack...

CVE-2025-60349

An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service by sending IOCTL code 0x22E044 to the pxscan.sys driver. Exploitation of this flaw results in the termination of any processes listed under the registry key HKEY_LOCAL_MACHINE ysstem yscurrentcontrolset se...

CVE-2025-60349: Uncontrolled Resource Consumption

An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key HKEYLOCALMACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated...

CVE-2025-40031: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

CVE-2025-61155

The GameDriverX64.sys kernel-mode anti-cheat driver v7.23.4.7 and earlier contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context...

CVE-2025-61155: Uncontrolled Resource Consumption

The GameDriverX64.sys kernel-mode anti-cheat driver v7.23.4.7 and earlier contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context...

CVE-2025-61155

The GameDriverX64.sys kernel-mode anti-cheat driver (versions 7.23.4.7 and earlier ), shipped with Tower of Fantasy by Hotta Studio / Perfect World, contains an access control vulnerability in an IOCTL handler. A local unprivileged user can open a handle to the driver device (\.andingHtAntiCheat...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38589)

netrom: fix possible dead-lock in nrrtioctl syzbot loves netrom, and found a possible deadlock in nrrtioctl 1 Make sure we always acquire nrnodelistlock before nrnodelocknrnode. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...