CVE-2024-54556: Improper Access Control

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from the lock screen...

MiracleLinux 7 : kernel-3.10.0-327.10.1.el7 (AXSA:2016-136:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-136:02 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Versions of Apple iOS prior to 18.1 and Apple iPadOS prior to 18.1 contained security vulnerabilities. These...

PT-2026-3263

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from the lock screen...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004343 advisory. In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h. Tenable has extracted the...

MiracleLinux 7 : gdm-3.22.3-11.el7, gnome-session-3.22.3-4.el7 (AXSA:2017-2139:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2139:01 advisory. gdm GDM provides the graphical login screen, shown shortly after boot up, log out, and when user-switching. gnome-session gnome-session manages a GNOME deskt...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001002 advisory. kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000783 advisory. The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003628 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004374 advisory. In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free ...

CVE-2026-21914 Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

CVE-2025-71079

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfcunregisterdevice and rfkillfopwrite A deadlock can occur between nfcunregisterdevice and rfkillfopwrite due to lock ordering inversion between devicelock and rfkillglobalmutex. The problematic lo...

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

...

CVE-2025-71099

A use-after-free flaw was found in the Intel Xe graphics driver's observability architecture OA configuration interface. In xeoaaddconfigioctl, the oaconfig-id is accessed after dropping the metricslock. An attacker could race to remove the configuration via xeoaremoveconfigioctl, freeing the...

SUSE CVE-2025-68786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current isize including 0, the code used to call checklockrangefilp, isize, size - 1, WRITE, which computes size - 1 and can underflow for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002697 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002842 advisory. The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002911 advisory. The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003079 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003129 advisory. Linux kernel: heap out-of-bounds in AFPACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes...