Azure Linux 3.0 Security Update: kernel (CVE-2025-21846)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21846 advisory. - In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue ...

MiracleLinux 8 : kernel-4.18.0-553.92.1.el8_10 (AXSA:2026-065:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-065:02 advisory. kernel: media: rc: fix races with imondisconnect CVE-2025-39993 kernel: sctp: avoid NULL dereference when chunk data buffer is missing CVE-2025-40240...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47809)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47809 advisory. - In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46720)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46720 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21814)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21814 advisory. - In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info-enable callback is alwa...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41037)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41037 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: fix null deref on...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38145)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38145 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37883)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37883 advisory. - In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for getzeroedpage A...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47704)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47704 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21857)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21857 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22007)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22007 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27046)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27046 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfp: flower: handle actinetdevs...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47756)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47756 advisory. - In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expressi...

CVE-2025-68141

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a DCChargeLoopRes message that includes Receipt as well as TaxCosts, the vector taxcosts in the target Receipt structure is accessed out of bounds. This occurs in the method template void...

EUVD-2025-206318

EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like Session, IConnection which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, witho...

CVE-2026-22976 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...

CVE-2026-22976 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...

MiracleLinux 9 : edk2-20240524-6.el9 (AXSA:2024-9428:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9428:12 advisory. mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC CVE-2023-6129 openssl: Excessive time spent checking invalid RSA...

MiracleLinux 7 : slapi-nis-0.56.5-4.el7 (AXSA:2021-1758:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1758:02 advisory. slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-3480 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : kernel-4.18.0-305.el8 (AXSA:2021-2148:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2148:12 advisory. kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c...