Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990215 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: fix validation of block size Block size should be between 512 and PAGESIZE and be a powe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989742 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988750 advisory. In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xascreaterange when multi-order entry present If there is already an entry present th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989361 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on block address in f2fsdozerorange As Yanming reported in bugzilla:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990103)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990103 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989400 advisory. In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990223 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988907 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-single...

Liferay Portal 7.4.0 < 7.4.3.120 Password Enumeration

Password enumeration vulnerability in Liferay Portal allows remote attackers to determine a user's password even if account lockout is enabled via brute force attack. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2025-0987

Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.This issue affects CVLand: from 2.1.0 through 20251103...

CVE-2025-47361

Memory corruption when triggering a subsystem crash with an out-of-range identifier...

CVE-2025-47361 Improper Validation of Array Index in Automotive Software platform based on QNX

Memory corruption when triggering a subsystem crash with an out-of-range identifier...

PT-2025-44928

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description A memory corruption issue exists when triggering a subsystem crash with an out-of-range identifier. The issue involves improper validation of an array index...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an out-of-range identifier is used to trigger a subsystem crash...

CVE-2025-47361: Improper Validation of Array Index

Memory corruption when triggering a subsystem crash with an out-of-range identifier...

@react-native-community/cli (>=19.0.0-alpha.0, <=19.1.1) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (>=19.0.0, <=19.1.1)

@react-native-community/cli-server-api NPM version =19.0.0, =19.0.0-alpha.0, =19.1.1 Source cves: CVE-2025-11953 Source advisory: OSV:GHSA-399J-VXMF-HJVR...

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Do not call mmput from the MMU notifier callback. If the process exits, the mmput call within the MMU notifier callback from compactd, fork, or numa balancing may release the last reference to the mm struct. This coul...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevents ALIGN overflow. When allocating IOVA, the candidate range is aligned to the target alignment. If the range is close to ULONGMAX, the ALIGN function may wrap, resulting in a corrupted iova structure. The code use...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fixed an issue where access to the vnicinfo array was out of range. The bnxtqueuestart | stop operation accesses vnicinfo, which also allocates resources. This indicates that bp-nrvnics. Therefore, it should not access...