Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987120 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created by...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-385539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-385539 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store...

CVE-2025-56243

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387772 advisory. In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-393292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393292 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987106 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414525 advisory. An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986871 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987356 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, any access that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-384561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384561 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrlenable The pctldev struct is allocated in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414317 advisory. A double-free flaw was found in the Linux kernels TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails...

EUVD-2025-32722

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987195 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem was in...

CVE-2025-56243

The PuneethReddyHC Event Management System 1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw in the register.php page. The root cause is the improper handling and lack of sanitization of the event_id GET parameter, which is reflected in the page output. A remote attacker can craft ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-409370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409370 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data registers register store...

PT-2025-41138

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists in the register.php page. The event id GET parameter is improperly handled, allowing an attacker to inject code into this parameter and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986382 advisory. In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed If hvnetvsc driver is unloaded a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414478 advisory. With shadow paging enabled, the INVPCID instruction results in a call to kvmmmuinvpcidgva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the BPF springboard not checking the BTI instruction when returning a patched function using the BLR instruction...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986707 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxlfileregisterafu inforelease will be called in...