Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002815 advisory. A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The null skcipher was being dropped when each afalgctx was freed instead...

Oracle Linux 9 : net-snmp (ELSA-2026-0696)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0696 advisory. 5.9.1-17.0.1.1 - fix error index value when snmpget is used a proxy pass Orabug: 35010262 1:5.9.1-17.1 - fix out of bound access issue RHEL-137510 - enable PQC...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002210 advisory. crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service NULL pointer dereference and system crash by using an AFALG socket...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003262 advisory. A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The null skcipher was being dropped when each afalgctx was freed instead...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002089 advisory. The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003091 advisory. The rngapireset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service NULL pointer dereference. Tenable has extracted...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003138 advisory. The cryptoskcipherinittfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002190 advisory. The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002054 advisory. The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003389 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a fil...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002595 advisory. An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone and related functions in crypto/cryptouser.c the crypto user configuration API do not full...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002714 advisory. crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1050)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : media: uvcvideo: Handle cameras with invalid descriptorsCVE-2023-53437 scsi: target: iscsi: Fix a race condition between loginwork and the login...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003283 advisory. Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service NULL pointer dereference or possibly gai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001871 advisory. The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial o...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...

CVE-2026-22858 FreeRDP has a global-buffer-overflow in crypto_base64_decode

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

CVE-2025-71131

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req-iv after cryptoaeadencrypt As soon as cryptoaeadencrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req-iv after it returns is invalid. Instead o...

UBUNTU-CVE-2025-71131

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req-iv after cryptoaeadencrypt As soon as cryptoaeadencrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req-iv after it returns is invalid. Instead o...

AZL-74612 CVE-2025-71113 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...