Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986733 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-388048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-388048 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 USB: serial: use generic meth...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987241 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987366 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly terminating a USB request block, which could lead to reuse after release...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414338 advisory. A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-383538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383538 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered on driver removal The removal of the last MAX3100...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986990 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface There may be a bad USB aud...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986950 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414549 advisory. In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986439)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986439 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-406106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-406106 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacrubind Syzbot is still reporting quite an old issu...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-404116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-404116 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3request-numqueuedsgs is decremented o...

EUVD-2025-32585

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System are now included in 6.1.9.8 and 6.2.3.2

Summary The following vulnerabilities that can affect IBM Storage Scale System and could provide weaker than expected security are now fixed in 6.1.9.8 and 6.2.3.2. Vulnerability Details CVEID:CVE-2024-26934 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: USB: cor...

USN-7774-5: Linux kernel (NVIDIA Tegra IGX) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

PT-2025-40944

Name of the Vulnerable Software and Affected Versions YoSmart YoLink Smart Hub device 0382 Description The device exposes a UART debug interface. An attacker with direct physical access can use this interface to read a boot log, which contains network access credentials. Recommendations At the...

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

CVE-2025-59447

Affected product/versions. YoSmart YoLink Smart Hub device 0382 is affected. The root cause is exposure of a UART debug interface. Impact. An attacker with direct physical access can read a boot log that includes network access credentials, leading to potential credential disclosure. Exploitation...