Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989772 advisory. In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Fix two use after free in ibmasminitone In ibmasminitone, it calls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989470 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989559 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against concurre...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988744 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGSSYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c3123...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990098 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988996 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbdallocconfig and module removal When nbd module is being removing,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990156 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kvdpm.c Adds bounds check for sumovidmappingentry. Tenable has...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990215 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: fix validation of block size Block size should be between 512 and PAGESIZE and be a powe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989001 advisory. In the Linux kernel, the following vulnerability has been resolved: block: don't delete queue kobject before its children kobjects aren't supposed to be deleted befo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989699 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sam9x5wm8731driverprobe The devicenode pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988866)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988866 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an ISERR vs NULL bug The getfreepages function does not return error pointers it...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989782 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990010 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix command ring pointer corruption while aborting a command The command ring pointer is...

CVE-2025-62719

LinkAce CVE-2025-62719 affects the htmlKeywordsFromUrl function in FetchController (versions ≤ 2.3.0). It allows SSRF by fetching user-provided URLs without validating that the destination is external, enabling authenticated attackers to perform port scanning and service discovery on internal net...

Vulnerability fixed in CFMOTO Ride vehicle data management systems

CFMOTO has fixed a vulnerability in the backend of systems that manage vehicle data. The vulnerability is in the way the vehicleId parameter is handled, leading to an Insecure Direct Object Reference IDOR. This allows attackers to gain unauthorized access to sensitive information from other users...

kernel: net: usb: smsc75xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be larger than the actual socket buffer length up to 9026 bytes. In such case the cloned skb passed up the network stack will leak kerne...

[R1] Tenable Identity Exposure Version 3.77.14 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Version 3.77.14 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 11/03/2025 - 09:50 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET, SQL and curl were found to contain...

USN-7839-2: Google Guest Agent vulnerability

USN-7839-1 fixed vulnerabilities in Go Cryptography. This update provides the corresponding update in the Go Cryptography module included in Google Guest Agent. Original advisory details: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectl...

xorg-x11-server update

1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119961, CVE-2025-62230 RHEL-120032, CVE-2025-62231 RHEL-125001...

Fedora 42 : samba (2025-7d890563f6)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7d890563f6 advisory. Update to Samba 4.22.6 - Security fix for CVE-2025-9640 and CVE-2025-10230 Tenable has extracted the preceding description block directly from the...