MiracleLinux 9 : kernel-5.14.0-162.12.1.el9_1 (AXSA:2023-4976:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4976:04 advisory. kernel: watch queue race condition can lead to privilege escalation CVE-2022-2959 kernel: memory corruption in AX88179178A based USB ethernet device...

MiracleLinux 9 : kernel-5.14.0-427.37.1.el9_4 (AXSA:2024-8865:31)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8865:31 advisory. kernel: uio: Fix use-after-free in uioopen CVE-2023-52439 kernel: net/sched: actmirred: don't override retval if we already lost the skb...

MiracleLinux 7 : libtiff-4.0.3-27.el7 (AXSA:2017-1282:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1282:01 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004783 advisory. An incorrect TLB flush issue was found in the Linux kernels GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001663 advisory. Since Linux kernel version 3.2, the mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the...

MiracleLinux 4 : libtiff-3.9.4-21.AXS4 (AXSA:2017-1285:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1285:01 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003980 advisory. An incorrect TLB flush issue was found in the Linux kernels GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could...

UBUNTU-CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

inet: frags: flush pending skbs in fqdir_pre_exit()

...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003243 advisory. An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003033 advisory. An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can...

CVE-2025-70309

GPAC 2.4.0 is affected by a stack overflow in pcmreframe_flush_packet triggered by a crafted WAV file, per multiple sources (CNVD, RedHat, NVD, OSV, Debian, Ubuntu, and others). The vulnerability stems from insufficient validation of input data length/size in the function, enabling a Denial of Se...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003461 advisory. fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs- flushing-before-commit list, which allows local users to...

kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

A null pointer dereference exists in the linux kernel such that in objstockflushrequired:stock-cachedobjcg can be reset between the check and dereference, resulting in damage to the availability of the system...

CVE-2025-71097

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects When a nexthop object is deleted, it is marked as dead and then fibtableflush is called to flush all the routes that are using the dead nexthop. The...

CVE-2025-71097

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects When a nexthop object is deleted, it is marked as dead and then fibtableflush is called to flush all the routes that are using the dead nexthop. The...