Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989267 advisory. In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988831 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slaballocnode assumes that...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989714 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: actually fix freelist pointer vs redzoning It turns out that SLUB redzoning slubdebug=Z...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989325 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace lo...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INTMAX When sysctlnropen is set to a very high value for example, 1073741816 as set by systemd, processes attempting to use file descriptors near the limit may trigger massi...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm: slub: Avoid waking up kswapd in settrackprepare settrackprepare may cause lock recursion. The issue arises because it is called from hrtimerstartrangens, which holds percpuhrtimerbasesn.lock. However, when...

EUVD-2025-31849

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

Linux Distros Unpatched Vulnerability : CVE-2025-39902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987014 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: actually fix freelist pointer vs redzoning It turns out that SLUB redzoning slubdebug=Z...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987388)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987388 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc fails In createuniqueid, kmalloc, GFPKERNEL can fail due...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987290 advisory. In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmemcacheopen In error path, the randomseq of slub cache...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987258 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slaballocnode assumes that...

EUVD-2025-30357

Malicious code in bioql PyPI...

EUVD-2025-28956

Malicious code in bioql PyPI...

CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

...

CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

AZL-68019 CVE-2025-39902 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

UBUNTU-CVE-2025-39902

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in objecterr objecterr reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempting to...

CVE-2025-39902

The CVE-2025-39902 issue affects the Linux kernel mm/slub, where object_err() may access metadata for an invalid pointer, potentially crashing the kernel. The root cause is accessing object metadata when the pointer is invalid; a path is when alloc_consistency_checks() flags an invalid pointer du...