CVE-2022-50829

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb It is possible that skb is freed in ath9khtcrxmsg, then usbsubmiturb fails and we try to free skb again. It causes use-after-free bug. Moreover, if allocskb fails,...

CVE-2022-50820 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()

In the Linux kernel, the following vulnerability has been resolved: perf/armdmc620: Fix hotplug callback leak in dmc620pmuinit dmc620pmuinit won't remove the callback added by cpuhpsetupstatemulti when platformdriverregister failed. Remove the callback by cpuhpremovemultistate in fail path. Simil...

CVE-2025-68974

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through =...

CVE-2025-68974 WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through =...

CVE-2025-68974

CVE-2025-68974 corresponds to a Local File Inclusion (LFI) vulnerability in the miniOrange WordPress Social Login and Register plugin (miniorange-login-openid) up to and including version 7.7.0. The issue stems from improper control of filenames for include/require statements, enabling PHP Local ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992432 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: add overflow check in registershmhelper With special lengths supplied by user space,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992510 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rioadddevice fails Patch series rapidio: fix three possible...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992566 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix potential buffer overflow in nisetmcspecialregisters The last case label can writ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing resources when deviceregister fails, which could lead to a memory leak...

PT-2025-53975

In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rio register mport If device register returns error, the name allocated by dev set name need be freed. It should use put device to give up the reference in the error path, so that the name...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992193)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992193 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm7xx1switchmedia If deviceregister returns error in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992300 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of...

PT-2025-54084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DMA channel offset calculation for SoCs of the SH3, SH4, and SH4A families. The existing implementation incorrectly calculates channel offsets,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992621 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fbinfo.dev Do not assing the Linux device to struct...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992256 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter If deviceregister fails in...

PT-2025-53968

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00190-g39508d23b672 Description The Linux kernel contains an issue in the ipr init function within the SCSI subsystem. Specifically, ipr init does not call unregister reboot notifier when pci register...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992221)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992221 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report whil...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992625 advisory. In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleonparsegdd In chameleonparsegdd, if mcbdeviceregister fails,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to unregister the reboot notifier when pciregisterdriver fails, which could result in a kernel...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to free a name when deviceregister fails, which could lead to a memory leak...