Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992521 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: unset reloc control if transaction commit fails in preparetorelocate In...

The vulnerability of the relocate_one_folio() function in the fs/btrfs/relocation.c module of the Btrfs file system support in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the relocateonefolio function in the fs/btrfs/relocation.c file of the Btrfs file system support module in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping. Since identity mapping is fixed at address zero, lowcore is always mapped to address zero as well. This occurs regardless of the relocatelowcore command-line option. If the optio...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfx8664relocatesection function. An attacker can cause a heap-based buffer overflow by providing specially crafted input files during the linking process. Remediation A fix was pushed into the master...

CVE-2025-11495 GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elfx8664relocatesection of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclos...

CVE-2025-11495

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elfx8664relocatesection of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclos...

EUVD-2025-28512

Malicious code in bioql PyPI...

EUVD-2022-0750

Malicious code in bioql PyPI...

EUVD-2022-55338

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-11101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfRelocate function in lib/modules/swftools.c...

SUSE CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

UBUNTU-CVE-2025-38733

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

CVE-2025-38733 s390/mm: Do not map lowcore with identity mapping

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcore is always also mapped to address zero, this happens regardless of the relocatelowcore command line option. If the...

btrfs: check folio mapping after unlock in relocate_one_folio()

...

CVE-2025-53315

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315 WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315 WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload allows Stored XSS. This issue affects Relocate Upload: from n/a through 0.24.1...

CVE-2025-53315

CVE-2025-53315 describes a CSRF vulnerability in the WordPress plugin Relocate Upload (alanft) affecting versions up to 0.24.1 that enables stored XSS. The CVE notes a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, no privileges required, but user interaction required, and changed...

CVE-2025-53315: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...