Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989510 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in nfregisternethook We must not dereference @newhooks after...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989863)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989863 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989558 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix the error handling path in idxdcdevregister If a call to allocchrdevregion...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988833)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988833 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989855 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989222 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxlfileregisterafu inforelease will be called in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989017 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix memory leak in dmisysfsregisterhandle kobjectinitandadd takes reference...

thermal: core: call put_device() only after device_register() fails

...

EUVD-2025-37306

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

...

EUVD-2022-55673

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS via the Apply Configuration error text. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

EUVD-2025-36663

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaimed without a NULL check, which will lead to a NULL pointer dereference...

DEBIAN-CVE-2025-40085

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaimed without a NULL check, which will lead to a NULL pointer dereference...

UBUNTU-CVE-2025-40085

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaimed without a NULL check, which will lead to a NULL pointer dereference...

CVE-2025-40085 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaimed without a NULL check, which will lead to a NULL pointer dereference...

CVE-2025-40085

Affected software: Linux kernel (ALSA: usb-audio).Issue: NULL pointer dereference in try_to_register_card when usb_ifnum_to_if() returns NULL and is passed to usb_interface_claimed() without a NULL check.Impact: NULL pointer dereference during creation of an invalid USB audio device (potential cr...

RISC-V: KVM: Write hgatp register with valid mode bits

...

kernel: nfsd: don't ignore the return code of svc_proc_register()

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

SUSE CVE-2025-40065

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero to the remaining fields of hgatp. We have detected the valid mode...

Linux Distros Unpatched Vulnerability : CVE-2025-40085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix NULL pointer deference in trytoregistercard In trytoregistercard, the return value of usbifnumtoif is passed directly to usbinterfaceclaime...