CVE-2026-21918 Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes

A Double Free vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of...

EUVD-2026-2689

An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX device configured for UTM Web-Filtering receives a specifical...

CVE-2025-68783

An out-of-bounds write flaw was found in the Linux kernel's ALSA USB mixer driver for Tascam US-16x08 audio interfaces. The getmeterlevelsfromurb function extracts channel indices from USB packets without validating the range. A malicious or malfunctioning USB device can send packets with...

SUSE CVE-2025-68783

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices getmeterlevelsfromurb parses the 64-byte meter packets sent by the device and fills the per-channel arrays meterlevel, complevel and masterlevel in struct...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003078 advisory. The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002037 advisory. Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002185 advisory. The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003435 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel before 4.3 does not ensure that nproto, ipproto, and thoff are initialized, which allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002225 advisory. net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002305)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002305 advisory. The sctpassociationfree function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001840 advisory. The virtnetprobe function in drivers/net/virtionet.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002438 advisory. drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003475 advisory. The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service infinite loop and soft lockup via...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002337 advisory. net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001818 advisory. drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which...

openSUSE 16 Security Update : libmicrohttpd (openSUSE-SU-2026:20016-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20016-1 advisory. - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereferenc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002406 advisory. The udp6ufofragment function in net/ipv6/udpoffload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly perform a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003400 advisory. drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002960 advisory. The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a network operating system specifically designed for hardware devices of the company Juniper Networks. This operating system provides secure programming interfaces and the Junos SDK. Vulnerabilities exist in versions prior to Junos OS 21.2R3-S9, versions 21.4 to...