Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992476 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs Read/WriteMACREG callbacks are NULL so the...

CVE-2023-54001

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

SUSE CVE-2022-50758

In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix potential memory leak In function deviceinittd0ring, memory is allocated for member tdinfo of priv-apTD0Ringsi, with i increasing from 0. In case of allocation failure, the memory is freed in reversed order,...

CVE-2022-50745

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix devicenode use after free At probe time this code path is followed: tegracsiinit tegracsichannelsalloc foreachchildofnodenode, channel -- iterates over channels automatically gets 'channel'...

CVE-2022-50758

In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix potential memory leak In function deviceinittd0ring, memory is allocated for member tdinfo of priv-apTD0Ringsi, with i increasing from 0. In case of allocation failure, the memory is freed in reversed order,...

CVE-2022-50758

The CVE-2022-50758 issue affects the Linux kernel staging/vt6655 code, where in device_init_td0_ring memory is allocated for priv->apTD0Rings[i]. If allocation fails, freed memory did not include i = 0, causing a potential memory leak. A fix updates the memory freeing loop to also release the ...

CVE-2022-50732 staging: rtl8192u: Fix use after free in ieee80211_rx()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211rx We cannot dereference the "skb" pointer after calling ieee80211monitorrx, because it is a use after free...

CVE-2023-54001

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

CVE-2023-54001

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

UBUNTU-CVE-2023-54001

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

CVE-2023-54001 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

CVE-2023-54001

CVE-2023-54001 details are not provided in the connected documents; monitor for updates.

CVE-2023-54001 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()

In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in r8712initxmitpriv In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This patch fixes commit...

PT-2025-53124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the device init td0 ring function within the vt6655 staging driver. Specifically, when allocating memory for the td info member of priv-apTD0Ringsi, a failure...

CVE-2025-12654

The CVE-2025-12654 entry applies to the WordPress WPvivid Backup & Migration plugin (Migration, Backup, Staging) version ≤ 0.9.120. The root cause is an insufficient restriction in check_filesystem_permissions(), which allows an authenticated attacker with Administrator-level access to create arb...

CVE-2025-68256 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser The Information Element IE parser rtwgetie trusted the length byte of each IE without validating that the IE body len bytes after the 2-byte header fits inside the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991176 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs Read/WriteMACREG callbacks are NULL so the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989387 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdmlterx The netifrxni function frees the skb so we can't...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988952 advisory. In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out of zr36057init and create ne...

Sensitive Information Exposure

com.liferay.portal, com.liferay.portal.kernel is vulnerable to Sensitive Information Exposure. The vulnerability is due to remote staging not properly obtaining the live site's remote address from the database, which allows remote authenticated users—who can obtain the staging server’s shared...