Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987089 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference Added checking of pointer function in pcssetmux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987354 advisory. In the Linux kernel, the following vulnerability has been resolved: netsched: fix NULL deref in fifosetlimit syzbot reported another NULL deref in fifosetlimit 1 I...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394417 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10setoutputtransferfunc' The...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986323 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986461 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpidevicesetname' fails, we must fre...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986874 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux pdesc could be null but sti...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414399 advisory. An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nftseteleminit leading to a buffer overflow could be used by a local attacker to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986357 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from failure to acquire an RTNL lock before calling xdpsetfeatures, which could result in a null pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987252 advisory. In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinn...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414466 advisory. A vulnerability was found in the Linux kernel's nftsetdescconcatparse function .This flaw allows an attacker to trigger a buffer overflow via nftsetdescconcatparse ,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-380530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380530 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the fresh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414670 advisory. A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986950 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndissetresponse If BufOffset is very large the...

CVE-2025-11328 Tenda AC18 SetDDNSCfg stack-based overflow

A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-11327

The CVE-2025-11327 entry concerns Tenda AC18 (version 15.03.05.19(6318)). A stack-based buffer overflow is triggered via /goform/SetUpnpCfg by manipulating the upnpEn argument. Public exploit information exists and suggests remote exploitation is possible. Connected sources corroborate a vulnerab...

EUVD-2025-32495

A weakness has been identified in Tenda AC18 15.03.05.196318. This affects an unknown part of the file /goform/WifiMacFilterSet. Executing manipulation of the argument wifichkHz can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available t...

CVE-2025-11325

CVE-2025-11325 affects Tenda AC18 routers (firmware around 15.03.05.19(6318)). The vulnerability is a stack-based overflow in the /goform/fast_setting_pppoe_set handler triggered by manipulating the Username parameter. It is remotely exploitable, with public exploit code available. Impact include...

CVE-2025-11325 Tenda AC18 fast_setting_pppoe_set stack-based overflow

A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-11325 Tenda AC18 fast_setting_pppoe_set stack-based overflow

A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...