CVE-2025-40197 media: mc: Clear minor number before put device

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...

BIT-TOMCAT-2025-55752 Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990485 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdioaddfunc or sdioinitfunc fails,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990050 advisory. In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomq6v5mss: Fix some leaks in q6v5allocmemoryregion The devicenode pointer is return...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989818 advisory. In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radixlock radixlock shouldn't be held while holding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989746 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mxs-saif: Fix refcount leak in mxssaifprobe ofparsephandle returns a node pointer with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989259 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: meson: Fix refcount leak in mesonsmppreparecpus offindcompatiblenode returns a node pointer...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990013 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988745 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: pfuze100: Fix refcount leak in pfuzeparseregulatorsdt ofnodeget returns a node with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989031 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on createrprocess and devicerelease Do not remove the map from th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989752 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988842 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix memory leak in ab8500fgsysfsinit kobjectinitandadd takes reference eve...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990206)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990206 advisory. In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radixlock radixlock shouldn't be held while holding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988799 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: brcmstb: pm-arm: Fix refcount leak and iomem leak bugs In brcmstbpmprobe, there are two kind...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989958 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: versatile: Add missing ofnodeput in dcscbinit The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989017 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix memory leak in dmisysfsregisterhandle kobjectinitandadd takes reference...