21944 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993156)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993156 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cp2112: prevent a buffer overflow in cp2112xfer Smatch warnings: drivers/hid/hid-cp2112.c:79...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992730)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992730 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992888)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992888 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992893)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992893 advisory. In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam Syzkaller reports a null-ptr-deref bug as...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993193)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993193 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992837)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992837 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here assumes...
FontForge 安全漏洞
FontForge is an open source font editing tool from fontforge that supports multiple languages. A security vulnerability exists in FontForge that stems from improper validation of data length when parsing PFB files, which could lead to a stack buffer overflow and remote code execution...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993304)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993304 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992746)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992746 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992990)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992990 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992847)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992847 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: make sure skb-len != 0 when redirecting to a tunneling device syzkaller managed to trigger...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992762)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992762 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb-len Packet length retrieved from descriptor may be...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992846)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992846 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's sendmsg implementation: 1...
EUVD-2023-60479
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...
EUVD-2023-60504
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9kwmictrlrx For the reasons also described in commit b383e8abed41 "wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg", ath9khtcrxmsg should validate pktlen before accessing...
EUVD-2023-60520
In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The buf4 value comes from the user via tsplay. It is a value in the u8 range. The final length we pass to av7110ipackinstantrepack is "len - buf4 + 1 - 4" so add a check to...
EUVD-2022-55920
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix musbgadget.c rxstate overflow bug The usb function device call musbgadgetqueue adds the passed request to musbep::reqlist,If the request-length musbep-packetsz and isbuffermappedreq return false,the rxstate will co...
EUVD-2022-55839
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the error length of VALIDATENEGOTIATEINFO message Commit d5c7076b772a "smb3: add smb3.1.1 to default dialect list" extend the dialects from 3 to 4, but forget to decrease the extended length when specific the dialect,...