MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.8.el7.AXS7 (AXSA:2025-9625:10)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9625:10 advisory. media: edia: dvbdev: fix a use-after-free CVE-2024-27043 btrfs: dev-replace: properly validate device names CVE-2024-26791 KVM: nSVM: Ignore nCR34:0...

CVE-2025-14172

The CVE-2025-14172 entry concerns the WP Page Permalink Extension WordPress plugin (affected versions up to and including 1.5.4). The vulnerability is a Missing Authorization issue in the cwpp_trigger_flush_rewrite_rules function tied to the wp_ajax_cwpp_trigger_flush_rewrite_rules AJAX action, e...

OESA-2026-1009 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resour...

CVE-2025-14172: Missing Authorization

The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.4. This is due to missing authorization checks on the cwpptriggerflushrewriterules function hooked to wpajaxcwpptriggerflushrewriterules. This makes it possible fo...

PT-2026-1732

Name of the Vulnerable Software and Affected Versions WP Page Permalink Extension versions prior to 1.5.5 Description The WP Page Permalink Extension plugin for WordPress is susceptible to a missing authorization issue. This occurs because of a lack of authorization checks within the cwpp trigger...

CVE-2019-12246

SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools...

PT-2026-46028

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/hns component where a reset triggered while using sunrpc can lead to a WQ MEM RECLAIM warning. This occurs because the hns roce irq workq workqueue lacks the ...

PT-2026-27750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netfilter subsystem, specifically in the nf tables component, related to set cloning during flushing operations. A Syzbot, utilizing fault...

PT-2026-27726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the PCI subsystem, specifically within the dwc endpoint driver. The issue relates to a race condition when handling MSI-X interrupts. Endpoint drivers...

PT-2026-27707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a race condition within the cpumap implementation when running on PREEMPT RT kernels. Specifically, concurrent access to the per-CPU xdp bulk queue bq by multip...

PT-2026-27659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the Linux kernel's bpf subsystem, specifically concerning the devmap functionality on PREEMPT RT kernels. Concurrent access to the per-CPU xdp dev bulk que...

PT-2026-8217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the macvlan component, specifically in the macvlan common newlink function. A use-after-free condition can occur when creating a new macvlan link...

PT-2026-8164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp pm nl flush addrs doit function within the Linux kernel’s MPTCP implementation. This issue stems from the use of list splice init which is not RCU...

PT-2026-8123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock situation can occur in the Linux kernel’s ath12k driver while flushing management frames. This happens when a management frame is queued for transmission and ath12k mac op flu...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993294 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: fix multipath crash caused by flush request when blktrace is enabled The flush request...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992966 advisory. In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvifflushhash During the listforeachentryrcu iteration call of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993172)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993172 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw iceqpdis intends to stop a given queue pair that is ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992994 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-992874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992874 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back t...

EUVD-2023-60397

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was...