kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

kernel: idpf: check error for register_netdev() on init

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...

kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hypervfb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the following WARN and henc...

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

MAL-2025-106173 Malicious code in nana-sroto20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcb0964880bb9d5a41c595c4ea2d9157bce2322043045658eeb67c685025245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84795 Malicious code in dono-toge69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ab9eabd768327170436a5a5d45dffe5490aebc42c9a155e89317579084bcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90752 Malicious code in steep_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2e41c0c52af0c4c335368dfc71d3b493fe20a9da6c128edea79fcec0e2a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69439 Malicious code in misty-purple-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9bf7c6a1772970d1726a021ffca4b464e754a1c77f7ba18f0370a35c68723a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

CVE-2025-12677

The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the registerapiroute function in kiotvietsync/includes/publicactions/WebHookAction.php. This makes it possible for unauthenticated attackers to extract the webhoo...

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990559 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxxmdiosregister ofgetchildbyname returns a node...

CVE-2025-12677 KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure

The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the registerapiroute function in kiotvietsync/includes/publicactions/WebHookAction.php. This makes it possible for unauthenticated attackers to extract the webhoo...

CVE-2025-12677

The KiotViet Sync WordPress plugin (versions up to and including 1.8.5) is vulnerable to Sensitive Information Exposure through register_api_route() in kiotvietsync/includes/public_actions/WebHookAction.php. Unauthenticated attackers can extract the webhook token value when configured. Public rep...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989222 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxlfileregisterafu inforelease will be called in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989855 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989592 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988849 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly...

PT-2025-52912

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the coresight ETR Embedded Trace Register component. Specifically, when ETR is enabled in CS MODE SYSFS and the buffer size is...