B&R Automation Runtime 安全漏洞

B&R Automation Runtime is an automation runtime from B&R Automation. A security vulnerability exists in B&R Automation Runtime versions prior to 6.4, which stems from the presence of reflective cross-site scripting in System Diagnostics Manager that could lead to the execution of arbitrary...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987130 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Check for null pointer of pointer substream before dereferencing it Pointer substream ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986384 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...

PT-2025-41144

Name of the Vulnerable Software and Affected Versions B Industrial Automation Automation Runtime versions prior to 6.4 Description An issue exists in B Industrial Automation Automation Runtime that allows for improper neutralization of input during web page generation, potentially leading to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987177 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986320 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hwparams and hwfree calls Currently we have neither proper...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403498 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986925 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hwparams and hwfree calls Currently we have neither proper...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986603 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987394)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987394 advisory. In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venusprobe fails at pmruntimeputsync the...

PT-2025-41145

Name of the Vulnerable Software and Affected Versions B Industrial Automation Automation Runtime versions 6.0 through 6.4 Description A flaw exists in the generation of numbers or identifiers within B Industrial Automation Automation Runtime. This issue could potentially compromise the security o...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986340 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hwparams and hwfree calls Currently we have neither proper...

B&R Automation Runtime 安全漏洞

B&R Automation Runtime is an automation runtime from B&R Automation. A security vulnerability exists in B&R Automation Runtime versions prior to 6.4 that stems from the SDM component's generation of predictable numbers or identifiers, which could lead to an unauthenticated cyber attacker taking...

B&R Automation Runtime 安全漏洞

B&R Automation Runtime is an automation runtime from B&R Automation. A security vulnerability exists in B&R Automation Runtime versions prior to 6.3 and prior to Q4.93 that stems from improper resource locking of the SDM component, which could lead to a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987339 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986767 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is...

PT-2025-41146

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation Automation Runtime versions 6.0 through 6.3, before Q4.93 Description An improper resource locking issue exists in B&R Industrial Automation Automation Runtime. This can lead to a denial-of-service DoS condition. The...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986366 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986105 advisory. Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat when using the APR/Native connector. This wa...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987282 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...