Fedora 43 : cri-o1.32 (2025-a246780676)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a246780676 advisory. - Update to release v1.32.10 - Resolves: rhbz2407593, rhbz2407864, rhbz2408140, rhbz2408571 - Resolves: rhbz2408638, rhbz2408701, rhbz2409048,...

Fedora 41 : cri-o1.34 (2025-8bd0d993db)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8bd0d993db advisory. - Update to release 1.34.2 - Resolves: rhbz2407595, rhbz2407866, rhbz2408142, rhbz2408577 - Resolves: rhbz2408640, rhbz2408703, rhbz2409050,...

Fedora 41 : cri-o1.32 (2025-8c88aa0c74)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8c88aa0c74 advisory. Update to release v1.32.10 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 43 : cri-o1.34 (2025-723e0fd8bd)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-723e0fd8bd advisory. - Update to release 1.34.2 - Resolves: rhbz2407595, rhbz2407866, rhbz2408142, rhbz2408577 - Resolves: rhbz2408640, rhbz2408703, rhbz2409050,...

Fedora 43 : cri-o1.33 (2025-b339c2eaad)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b339c2eaad advisory. - Update to release 1.33.6 - Resolves: rhbz2407594, rhbz2407865, rhbz2408141, rhbz2408575 - Resolves: rhbz2408639, rhbz2408702, rhbz2409049,...

TencentOS Server 3: conmon (TSSA-2022:0258)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0258 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

AZL-70316 CVE-2025-47913 affecting package cri-o 1.30.1-1

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CVE-2025-36250

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server formerly known as NIM master service nimesis could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in...

CVE-2025-36250

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server formerly known as NIM master service nimesis could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in...

CVE-2025-36096 AIX Insufficiently Protected Credentials

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques...

CVE-2025-36251

CVE-2025-36251 : IBM AIX nimsh service SSL/TLS implementations allow a remote attacker to execute arbitrary commands due to improper process controls. Affected: AIX 7.2, AIX 7.3, and VIOS 3.1 and 4.1. This is part of a broader set of issues addressed in IBM’s security bulletin which lists related...

CVE-2025-36251 AIX Command Execution

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347...

IBM AIX和IBM VIOS 安全漏洞

IBM AIX and IBM VIOS are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM VIOS is part of the PowerVm® Editions hardware feature set.IBM AIX is an open standards-based UNIX...

PT-2025-46924

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The nimsh service’s SSL/TLS implementations in IBM AIX and VIOS are susceptible to improper process controls, potentially enabling a remote attacker to execute arbitrary...

PT-2025-46921

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The software stores NIM private keys used in NIM environments in an insecure manner, making them susceptible to unauthorized access by an attacker employing man-in-the-midd...

Fedora 44 : cri-o1.34 (2025-c5b10ae815)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c5b10ae815 advisory. Automatic update for cri-o1.34-1.34.2-1.fc44. Changelog Tue Nov 11 2025 Bradley G Smith - 1.34.2-1 - Update to release 1.34.2 - Resolves: rhbz240759...

kernel: ibmvnic: Don't reference skb after sending to VIOS

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushing the xmit buffer to VIOS, the txbytes stat was incremented by the length of the skb. It is invalid to access the skb memory after sending t...

kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write

A flaw was found in the Linux kernel's iouring subsystem. A local user with administrative privileges can cause a Denial of Service DoS by triggering a system deadlock. This issue occurs when direct input/output I/O write requests are processed during an active filesystem freeze without verifying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989354 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix an Oops in pnfsmarkrequestcommit when doing ODIRECT Fix an Oopsable condition in...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/fbdev-dma: Added shadow buffering for deferred I/O. DMA areas are not necessarily backed by struct page, so we cannot rely on it for deferred I/O. Allocate a shadow buffer for drivers that require deferred I/O and use it a...