Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52859)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004290 advisory. An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52433)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000828 advisory. drivers/hid/hid-ntrig.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDNTRIG is enabled, allows physically proximate...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001358 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfsrootnode when mounting a crafted btrfs image, because of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000723 advisory. The onlinepages function in mm/memoryhotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service NULL pointer dereference and system cra...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004227 advisory. An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/eventsbase.c allows event-channel removal during the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000832 advisory. The clie5attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service NULL...

MiracleLinux 7 : sox-14.4.1-7.el7 (AXSA:2019-4121:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4121:01 advisory. sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 Tenable has extracted the preceding description block directly from the MiracleLin...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003891 advisory. An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c drive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003708 advisory. drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004051 advisory. An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c, which ma...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001124 advisory. In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor,...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003925 advisory. A vulnerability was found in Linux Kernel where in the spkttyioreceivebuf2 function, it would dereference spkttyiosynth without checking whether it is NULL or not, a...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52432)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003882 advisory. An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000663 advisory. crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is...

MiracleLinux 7 : libvirt-4.5.0-23.el7 (AXSA:2019-4192:10)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4192:10 advisory. libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function CVE-2019-3840 Tenable has extracted the preceding...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003775 advisory. An issue was discovered in dlparparseccproperty in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of...

MiracleLinux 4 : libtasn1-2.3-6.AXS4 (AXSA:2014-385:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-385:01 advisory. This is the ASN.1 library used in GNUTLS. More up to date information can be found at http://www.gnu.org/software/gnutls and http://www.gnutls.org...