Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989353 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989169 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput on failed usercopy If the copy back to userland fails for the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989874 advisory. In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990020)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990020 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990212 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988793 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 tty: serialcore: convert...

CVE-2025-47368

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

CVE-2025-47367 Out-of-bounds Write in WinBlast Driver

Memory corruption while accessing a buffer during IOCTL processing...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fixed potential out-of-bounds read/write access. When using publicly available tools like ‘mdio-tools’ to read/write data from/to network interfaces via mdiobus, there is no verification of the parameters passed to t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: A overflow has been prevented in the size calculation for memdupuser. The number of apqn target list entries contained in the nrapqns variable is determined by the user space through an ioctl call. Therefore, the resul...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: comedi: The issue of using uninitialized memory in doinsnioctl and doinsnlistioctl has been fixed. syzbot reports a KMSAN kernel-infosek in doinsnioctl. A kernel buffer is allocated to hold insn-n samples each of which is an...

Astra Linux - Vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the following splat. 0 This occurs if ioctlATMARPMKIP is called more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call...

CVE-2025-61156

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

UBUNTU-CVE-2025-40031

In the Linux kernel, the following vulnerability has been resolved: tee: fix registershmhelper In registershmhelper, fix incorrect error handling for a call to ioviterextractpages. A case is missing for when ioviterextractpages only got some pages and return a number larger than 0, but not the...

Hotta Studio GameDriverX64.sys 安全漏洞

Hotta Studio GameDriverX64.sys is the underlying driver file for a game from Hotta Studio China. A security vulnerability exists in Hotta Studio GameDriverX64.sys version 7.23.4.7, which stems from improper handling of specially crafted IOCTL requests and could lead to a denial of service attack...

CVE-2025-60349

CVE-2025-60349 affects Prevx v3.0.5.220. The issue is a denial-of-service vulnerability caused by the pxscan.sys driver not handling IOCTL code 0x22E044, which can terminate any processes listed under the registry path HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files. Multiple so...

CVE-2025-61155

CVE-2025-61155 affects Hotta Studio’s GameDriverX64.sys kernel-mode anti-cheat driver (versions 7.23.4.7 and earlier). The vulnerability is in an IOCTL handler: an untrusted user-mode process can open the driver and send crafted IOCTLs, which execute in kernel mode with insufficient authenticatio...

CVE-2025-61155

The GameDriverX64.sys kernel-mode anti-cheat driver v7.23.4.7 and earlier contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38589)

netrom: fix possible dead-lock in nrrtioctl syzbot loves netrom, and found a possible deadlock in nrrtioctl 1 Make sure we always acquire nrnodelistlock before nrnodelocknrnode. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...