CVE-2023-54193

CVE-2023-54193 affects the Linux kernel net/sched cls_api flow: when tcf_block_bind() errors, flow_block_cb objects were still in the driver_list, causing use-after-free. The fix removes flow_block_cb entries from driver_list before deallocation (the patch references show the changes). Affected: ...

WordPress Payment Gateway Authorize.Net CIM for WooCommerce plugin <= 2.1.2 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Payment Gateway Authorize.Net CIM for WooCommerce versions = 2.1.2...

PT-2025-54022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the net/sched subsystem related to the handling of traffic control blocks. Specifically, the error handler in tcf block bind frees the cb list without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992523 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pmruntimeget failing in .remove In the unlikely event that pmruntimeget...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992683 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992641 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a potential UAF in hfscdequeue too Similarly to the previous patch, we need t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992335 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsa...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992691 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rioaddnet in rioscanallocnet The return value of rioaddnet should be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992637 advisory. In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices...

PT-2025-54105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s Network File System daemon nfsd related to the initialization of per-CPU reply cache statistics counters. A previous commit moved the initialization o...

PT-2025-54152

In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx lock syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took tx...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992658 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg When receiving propos...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992638 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sockrecvmsg when draining clc data When receiving clc msg, the fie...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992609 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: fix memory leak inside XPDTX with mergeable When we call xdpconvertbufftoframe to get...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992401 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a user port...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992554)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992554 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by canceldelayedworksyn The following LOCKDEP was detected:...

Slackware: Security Advisory (SSA:2025-359-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/net-snmp-5.9.3-i586-2slack15.0.txz: Rebuilt. This update fixes a security issue: snmptrapd: fixed a critical vulnerability triggere...

CVE-2019-25254

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft malicious web pages that automatically submit forms to add new admin accounts with predefined credentials when...

CVE-2023-53987

A flaw was found in the Linux kernel. A local attacker could exploit a potential NULL dereference vulnerability in the ping socket handling when accessing /proc/net/icmp. This issue arises from an incorrect use of Read-Copy Update RCU instead of a spinlock. Successful exploitation of this flaw...