WordPress Registration & Login with Mobile Phone Number for WooCommerce plugin <= 1.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Registration & Login with Mobile Phone Number for WooCommerce versions = 1.3.1...

CVE-2022-50850 scsi: ipr: Fix WARNING in ipr_init()

In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when pciregisterdriver fails, which causes a WARNING. Call unregisterrebootnotifier when pciregisterdriver fails. notifier callback iprhalt ipr...

CVE-2022-50850

CVE-2022-50850 affects the Linux kernel component: scsi/ipr. The issue described is a WARNING raised when ipr_init() calls unregister_reboot_notifier() if pci_register_driver() fails, leading to a logged WARN and a notifier chain risk. Patches fix the root cause by ensuring unregister_reboot_noti...

CVE-2023-54229 wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range Because of what seems to be a typo, a 6Ghz-only phy for which the BDF does not allow the 7115Mhz channel will fail to register: WARNING: CPU: 2 PID: 1...

CVE-2023-54229

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range Because of what seems to be a typo, a 6Ghz-only phy for which the BDF does not allow the 7115Mhz channel will fail to register: WARNING: CPU: 2 PID: 1...

CVE-2023-54229

Technical details about CVE-2023-54229 are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories.

CVE-2023-54229 wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range Because of what seems to be a typo, a 6Ghz-only phy for which the BDF does not allow the 7115Mhz channel will fail to register: WARNING: CPU: 2 PID: 1...

CVE-2023-54228 regulator: raa215300: Fix resource leak in case of error

In the Linux kernel, the following vulnerability has been resolved: regulator: raa215300: Fix resource leak in case of error The clkregisterclkdev allocates memory by calling vclkdevalloc and this memory is not freed in the error path. Similarly, resources allocated by clkregisterfixedrate are no...

CVE-2022-50847 drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

CVE-2022-50820 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()

In the Linux kernel, the following vulnerability has been resolved: perf/armdmc620: Fix hotplug callback leak in dmc620pmuinit dmc620pmuinit won't remove the callback added by cpuhpsetupstatemulti when platformdriverregister failed. Remove the callback by cpuhpremovemultistate in fail path. Simil...

PT-2025-54169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the CXL/PMEM subsystem during NVMe DIMM NVDIMM registration. Specifically, the issue occurs when the lower half of asynchronous NVDIMM device registration runs...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992443 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992215 advisory. In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix kmemleak in watchdogcdevregister kmemleak reports memory leaks in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper channel scope checking, which could lead to registration failure...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992450)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992450 advisory. In the Linux kernel, the following vulnerability has been resolved: media: tw686x: Fix memory leak in tw686xvideoinit videodevicealloc allocates memory for vdev, whe...

PT-2025-53938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s dmc620 pmu init function within the perf/arm dmc620 module. The function fails to remove a callback added by cpuhp setup state multi when platform...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the existence of a race condition in nvdimm registration, which could lead to a null pointer dereference...

CVE-2025-69205

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

CVE-2025-69205 In µURU, a Specially Crafted Federation Name Allows Dialplan Injection

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

CVE-2025-69205 In µURU, a Specially Crafted Federation Name Allows Dialplan Injection

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...