Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002575)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002575 advisory. Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory b...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003126 advisory. The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading ref...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003219 advisory. An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003504 advisory. The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002560 advisory. The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003191 advisory. The vmwsurfacedefineioctl function in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001844 advisory. The sndctlelemadd function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002407 advisory. The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003500 advisory. The Linux kernel 4.15 has a Buffer Overflow via an SNDRVSEQIOCTLSETCLIENTPOOL ioctl write operation to /dev/snd/seq by a local user. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003114 advisory. drivers/infiniband/ulp/srpt/ibsrpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service NULL pointer dereference and system crash by...

CVE-2026-23477

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...

CVE-2026-23477

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...

CVE-2025-67859 Polkit Authorization Check can be Bypassed in the TLP power daemon

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

CVE-2025-67859

The CVE-2025-67859 entry relates to an improper authentication vulnerability in the TLP power daemon (Polkit-related) that allows a local user to arbitrarily change the active power profile and the daemon’s log settings. Affected software is TLP (versions 1.9 before 1.9.1). The issue is categoriz...

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

CVE-2025-67859 Polkit Authorization Check can be Bypassed in the TLP power daemon

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001381 advisory. A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD...

Lenovo多款产品 安全漏洞

Lenovo ThinkPlus FU100 is a fingerprint USB flash drive.Lenovo ThinkPlus FU100 is a fingerprint USB flash drive.Lenovo ThinkPlus FU200 is a fingerprint USB flash drive.Lenovo ThinkPlus TU800 is a USB flash drive. A security vulnerability exists in a number of Lenovo products, where a locally...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001414 advisory. A memory leak flaw was found in the Linux kernels DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read random memory from the...

MiracleLinux 3 : kernel-2.6.18-194.13.AXS3 (AXSA:2011-264:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-264:04 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...