Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414349 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in drivers/net/hyperv/netvscdrv.c lacks check of the return value of kvmallocarra...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414351 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks check of kmallocarray. Tenable has extracted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403236 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986442)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986442 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmallocarray As the kmallocarray may return null,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986284 advisory. In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986847 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986321 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-413933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-413933 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986482)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986482 advisory. In the Linux kernel, the following vulnerability has been resolved: isdn: cpai: check ctr-cnr to avoid array index out of bound The cmtpaddconnection would add a cm...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986275 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmallocarray As the kmallocarray may return null,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986314 advisory. In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport The i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987269 advisory. In the Linux kernel, the following vulnerability has been resolved: vtioctl: fix arrayindexnospec in vtsetactivate arrayindexnospec ensures that an out-of-bounds val...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987035 advisory. In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in imainitcrypto On failure to allocate the SHA1 tfm, IMA fails to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414352 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. lkdtmARRAYBOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc and will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987387 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986559 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986884 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Free the page array when watchqueue is dismantled Commit 7ea1a0124b6d watchqueue: Fre...

ROS-20251006-16

A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...

ROS-20251006-14

A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...

RockyLinux 8 : kernel (RLSA-2025:15471)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15471 advisory. kernel: bpf: Don't use tnumrange on array range checking for poke descriptors CVE-2022-49985 kernel: posix-cpu-timers: fix race between...