Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990145 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990254 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev-pdev changes If a PCI device is removed during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989528 advisory. In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn reportfilterlistlock into a rawspinlock Ran Xiaokai reports that with a KCSAN-enabled...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990042 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990242 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopffinit only checks the total sum of the report...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990079 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udffindentry Syzbot reported a slab-out-of-bounds Writ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990062 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev-pdev changes If a PCI device is removed during...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990354 advisory. In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn reportfilterlistlock into a rawspinlock Ran Xiaokai reports that with a KCSAN-enabled...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989310 advisory. In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in setflicker Syzkaller reported the following issue:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989924 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantechchangereportid The array param in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989393 advisory. In the Linux kernel, the following vulnerability has been resolved: erspan: do not assume transport header is always set Rewrite tests in ip6erspantunnelxmit and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989089 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...

CVE-2025-12682

creationtimestamp| type| source ---|---|--- 2025-11-04 16:22:04+00:00| seen| https://gist.github.com/Darkcrai86/d477a5a43e9450708e8494e94190947f 2025-11-04 17:33:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4t2wliumm2s...

CVE-2025-20732

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege when OceReducedNeighborReport is disabled. User interaction is not needed for exploitation...

CVE-2025-20731

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege when OceReducedNeighborReport is disabled. User interaction is not needed for exploitation...

EUVD-2025-37555

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-395...

CVE-2025-20732

The CVE-2025-20732 entry describes a local privilege-escalation flaw in the wlan AP driver (Linksys Wireless Network Controller Driver) caused by an incorrect bounds check that enables an out-of-bounds write. Impact is local, with no user interaction required, and exploitation is not detailed in ...

EUVD-2025-37575

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-11890

creationtimestamp| type| source ---|---|--- 2025-11-04 05:47:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rtihh26z2q...

CVE-2025-12610

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...