28 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004422)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004422 advisory. In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c. Tenable has extracted the preceding description blo...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993261)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993261 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988713)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988713 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990377)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990377 advisory. In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987227)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987227 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevfinitmodule ixgbevfinitmodule won't destroy the workqueue...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986871)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986871 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when...
DEBIAN-CVE-2022-50342
In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in dofloppyinit A memory leak was reported when floppyallocdisk failed in dofloppyinit. unreferenced object 0xffff888115ed25a0 size 8: comm "modprobe", pid 727, jiffies 4295051278 age 25.529s hex dump firs...
CVE-2022-49350
CVE-2022-49350 affects the Linux kernel in the net/mdio area, where the symbol mdio_bus_init is annotated with init and exported. The combination of EXPORT_SYMBOL with init places code in .init.text, which may be freed after init and lead to a kernel panic if accessed by modules. The public advis...
UBUNTU-CVE-2024-52332
In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igbinitmodule The pciregisterdriver can fail and when this happened, the dcanotifier needs to be unregistered, otherwise the dcanotifier can be called when igb fails to install, resulti...
SUSE CVE-2024-53227
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...
UBUNTU-CVE-2024-53227
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...
UBUNTU-CVE-2024-50119
In the Linux kernel, the following vulnerability has been resolved: cifs: fix warning when destroy 'cifsiorequestpool' There's a issue as follows: WARNING: CPU: 1 PID: 27826 at mm/slub.c:4698 freelargekmalloc+0xac/0xe0 RIP: 0010:freelargekmalloc+0xac/0xe0 Call Trace: ? warn+0xea/0x330...
SUSE CVE-2022-49027
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when pciregisterdriver failed. Call destroyworkqueue when pciregisterdriver failed to prevent the resource leak. Similar to the handling of...
UBUNTU-CVE-2022-49027
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavfinitmodule The iavfinitmodule won't destroy workqueue when pciregisterdriver failed. Call destroyworkqueue when pciregisterdriver failed to prevent the resource leak. Similar to the handling of...
Google Pixel 安全漏洞
Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the govinit module, which may be read out of bounds...
PT-2023-33265 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2023-33264 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.82. The actual impact and attack...
PT-2023-33173 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns error handling in the iavf init module function. It was introduced in version v4.6 and fixed in version v6.0.12. The actual impact and attack plausibility have not yet bee...
PT-2023-33175 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2023-33335 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...