Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992893 advisory. In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam Syzkaller reports a null-ptr-deref bug as...

Linux Distros Unpatched Vulnerability : CVE-2023-54206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: flower: fix filter idr initialization The cited commit moved idr initialization too early in flchange which allows concurrent users to access the...

EulerOS Virtualization 2.13.0 : aide (EulerOS-SA-2025-2604)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993025 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992861)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992861 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences vport. The...

Unity Linux 20.1070e Security Update: openjpeg2 (UTSA-2025-993315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993315 advisory. openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. Tenable has extracted the preceding description block directl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992725 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter If deviceregister fails in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993282 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile-parent-dentsAAFSPROFDIR could be NULL onl...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993045 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992821 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwl4965: Add missing check for createsinglethreadworkqueue Add the check for the return val...

Linux Distros Unpatched Vulnerability : CVE-2023-54198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct...

Linux Distros Unpatched Vulnerability : CVE-2022-50817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns...

Linux Distros Unpatched Vulnerability : CVE-2023-54298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intel: quarkdts: fix error pointer dereference If allocsocdts fails, then we can just return. Trying to free socdts will lead to an Oops. CVE-2023-5429...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993033 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching th...

EUVD-2025-205834

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the searchpath parameter...

CVE-2025-65411

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the searchpath parameter...

UBUNTU-CVE-2025-65411

A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the searchpath parameter...

EUVD-2023-60483

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...

EUVD-2023-60515

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedfmain.c:3056 qedfallocglobalqueues warn: missing unwind goto? At this point in the function, nothing has been allocated so we can return...

EUVD-2023-60506

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quarkdts: fix error pointer dereference If allocsocdts fails, then we can just return. Trying to free "socdts" will lead to an Oops...