CVE-2025-69429

The ORICO NAS CD3510 (version V1.9.12 and below ) is vulnerable to an Incorrect Symlink Follow vulnerability. An attacker with physical access can format a USB drive to ext4 , create a symbolic link to its root directory, and insert it into the NAS. By accessing the symlink directory mounted on t...

CVE-2025-69431

The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...

SUSE CVE-2025-22072

In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "POWERPC spufs: Fix gang destroy leaks" we used to have a problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets removed when that gets...