Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992520)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992520 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if deviceadd fails If deviceadd returns error, the name...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992298 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Do not free qvector unless new one was allocated Avoid potential use-after-free condition...

Linux Distros Unpatched Vulnerability : CVE-2023-54169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: fix memory leak in mlx5eptpopen When kvzallocnode or kvzalloc failed in mlx5eptpopen, the memory pointed by c or cparams is not freed, which can lead...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992204 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimcinit fails In vimcinit, when...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992679)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992679 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pciregisterhostbridge If deviceregister fails, call putdevice to give ...

The vulnerability of the virtualization management library libvirt, related to access control deficiencies, allows a attacker to trigger a service failure.

The vulnerability of the virtualization management library libvirt is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created malicious XML file...

CVE-2025-15125 JeecgBoot queryDepartPermission improper authorization

A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. The attack can be launched remotely. This attack is...

Fedora 42 : tkimg (2025-419c60783f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-419c60783f advisory. Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS. Tenable has extracted the preceding...

The vulnerability of the tcp_metrics component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the tcpmetrics component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pps_register_cdev() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ppsregistercdev function in the Linux operating system is related to the disclosure of information in error messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dst_dev_rcu() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dstdevrcu function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nbd component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the n_gsm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ngsm component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-54017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname...

The vulnerability of the run_unpack() function in the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the rununpack function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the PERF_IDX2OFF() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the PERFIDX2OFF function in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `__pnet_find_base_ndev()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pnetfindbasendev function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-50698

In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219registerdaiclks If clkhwregister fails, the corresponding clk should not be unregistered. To handle errors from loops, clean up partial iterations before doing the goto. So add a...

CVE-2022-50702

In the Linux kernel, the following vulnerability has been resolved: vdpasim: fix possible memory leak in vdpasimnetinit and vdpasimblkinit Inject fault while probing module, if deviceregister fails in vdpasimnetinit or vdpasimblkinit, but the refcount of kobject is not decreased to 0, the name...

CVE-2023-54017

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...