MiracleLinux 7 : zsh-5.0.2-31.el7 (AXSA:2018-3420:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3420:01 advisory. zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 zsh: buffer overflow for very long fds in Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003593 advisory. drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003676 advisory. drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001064 advisory. The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux RHEL 7.1 allows physically proximate...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003591 advisory. drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000994 advisory. The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by sending each descriptor over a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001124 advisory. In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003734 advisory. In parsehidreportdescriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000552)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000552 advisory. The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL point...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000876 advisory. The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001374 advisory. In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000966 advisory. The digiportinit function in drivers/usb/serial/digiacceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000625 advisory. Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a...

scsi: target: Reset t_task_cdb pointer in error case

...

kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses

A bounds-checking flaw was found in the Linux kernel Small Computer System Interface Enclosure Services driver in the way descriptor pointers are validated while processing enclosure data. Missing checks could allow an out-of-bounds access during parsing. A local user could use this flaw to crash...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002554 advisory. The createfixedstreamquirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002676 advisory. drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003139 advisory. The usbgetbosdescriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service out-of-bounds read a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003031 advisory. The digiportinit function in drivers/usb/serial/digiacceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002750)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002750 advisory. Double free vulnerability in the sndusbmidicreate function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial...