1100 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-40057
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: Add a upper bound on maxvclocks syzbot reported WARNING in maxvclocksstore. This occurs when the argument max is too large for kcalloc to handle. Extend th...
PT-2026-37457
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the JFS file system within the jfs rename function. When the nlink number of hard links for a directory is at its maximum value -1 and a rename operation is...
Siemens SIMATIC Devices Divide By Zero (CVE-2024-27059)
In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...
Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-35896)
In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 bpf: Try to avoid kzalloc in cgroup/s,getsockopt setsockopt @optlen argument should be tak...
EUVD-2022-54561
In the Linux kernel, the following vulnerability has been resolved: net: tun: unlink NAPI from device on destruction Syzbot found a race between tun file and device destruction. NAPIs live in struct tunfile which can get destroyed before the netdev so we have to del them explicitly. The current...
EUVD-2022-54571
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix lockdep splat in in6dumpaddrs As reported by syzbot, we should not use rcudereference when rcureadlock is not held. WARNING: suspicious RCU usage 5.19.0-rc2-syzkaller 0 Not tainted net/ipv6/addrconf.c:5175 suspicious...
SUSE CVE-2023-53731
In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlinkseterr syzbot reported a possible deadlock in netlinkseterr 1 A similar issue was fixed in commit 1d482e666b8e "netlink: disable IRQs for netlinklocktable" in netlinklocktable This patch...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987618)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987618 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap Limit max values for vht mcs and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987707)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987707 advisory. In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING in plusb.c The syzbot fuzzer detected a bug in the plusb...
kernel: HID: core: Harden s32ton() against conversion to 0 bits
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...
SUSE CVE-2022-50546
In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4evictinode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4evictinode+0xdd/0x26b0 fs/ext4/inode.c:180...
Linux Distros Unpatched Vulnerability : CVE-2023-53548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1...
EUVD-2025-32799
In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4evictinode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4evictinode+0xdd/0x26b0 fs/ext4/inode.c:180...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-393612)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393612 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series nilfs2: fi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-360474)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-360474 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986294)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986294 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the...
PT-2025-41127
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a condition in the HFSplus filesystem implementation where WARN ON was triggered in the hfsplus cat read,write inode functions due to a crafted filesystem imag...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987312)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987312 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: serialize hash resizes and cleanups Syzbot was able to trigger the followin...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-449274)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-449274 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT if the newly created subvolume already got read BUG There is a syzbot crash,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986975 advisory. In the Linux kernel, the following vulnerability has been resolved: schcake: do not call cakedestroy from cakeinit qdiscs are not supposed to call their own destroy...