Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000831 advisory. Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001290 advisory. The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001293 advisory. The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001236 advisory. Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server nfsd that can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004298 advisory. In the Linux kernel before 5.7.8, fs/nfsd/vfs.c in the NFS server can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka...

MiracleLinux 4 : kernel-2.6.32-642.3.1.el6 (AXSA:2016-612:06)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-612:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...

CVE-2025-68803

A flaw was found in the Linux kernel's NFSv4 server implementation. When an NFSv4 client creates a file and specifies an ACL with named principals, the server fails to apply the requested ACL. The nfsdcreatesetattr function checks only for iattr changes and security labels but not POSIX ACLs,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001977)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001977 advisory. Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003342 advisory. Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server nfsd that can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001787 advisory. The nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003266 advisory. The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001960 advisory. fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003056 advisory. The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002145 advisory. The nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002272 advisory. The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002694 advisory. The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002134 advisory. fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS...

kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC with ops-opnum == OPILLEGAL OPDESC simply indexes into nfsd4ops by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds...

kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

A vulnerability has been identified in the Linux kernel's Network File System NFS daemon that could allow for a Denial of Service and in worst case scenario Arbitrary Code Execution. This Use-After-Free flaw arises from a race condition when the kernel handles the confirmation of an NFS client...