MiracleLinux 9 : firefox-115.6.0-1.el9_3.ML.1 (AXSA:2024-7350:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7350:02 advisory. Mozilla: Heap-buffer-overflow affecting WebGLDrawElementsInstanced method with Mesa VM driver CVE-2023-6856 Mozilla: Memory safety bugs fixed in...

MiracleLinux 8 : kernel-4.18.0-240.el8 (AXSA:2021-1489:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1489:04 advisory. kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004385 advisory. An issue was discovered in slcbump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized canframe data,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001493 advisory. net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001415 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000728 advisory. The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure ha...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004012 advisory. An issue was discovered in slcbump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized canframe data,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004452 advisory. In doiptgetctl and doiptsetctl of iptables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000800 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004180 advisory. In doiptgetctl and doiptsetctl of iptables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002246 advisory. Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipcaddid call that leads to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002426 advisory. The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003209 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002841 advisory. The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002469 advisory. arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002308 advisory. The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtai...

CVE-2025-71113

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...

CVE-2025-71113 crypto: af_alg - zero initialize memory allocated via sock_kmalloc

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...

CVE-2025-71113

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000635 advisory. The nrrecvmsg function in net/netrom/afnetrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure h...