Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003491 advisory. In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001888 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001915 advisory. The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002106 advisory. Race condition in the smbsendrqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service NULL pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003079 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003282 advisory. The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003095 advisory. The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002872 advisory. The getpipe function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002739 advisory. The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setupntlmv2rsp that allows an attacker controlling a CIFS...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001810 advisory. The udpv6pushpendingframes function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002256 advisory. The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer...

kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()

An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

kernel: smb: client: Fix use-after-free in cifs_fill_dirent

A use-after-free flaw was found in cifsfilldirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem...

kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()

An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003

This module integrates the AT Internet SmartTag service. The module does not filter administrator-entered text leading to a persistent Cross-site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer atsmarttag"...

Tenda M3 /goform/setInternetLanInfo File Heap Buffer Overflow Vulnerability

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 heap buffer overflow vulnerability exists, the vulnerability stems from the file / goform / setInternetLanInfo function...

MiracleLinux 4 : openswan-2.6.32-4.2.0.1.AXS4 (AXSA:2011-553:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-553:01 advisory. Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authenticatio...

MiracleLinux 4 : cyrus-imapd-2.3.16-6.AXS4.3 (AXSA:2011-675:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-675:01 advisory. The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000680 advisory. Race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001731 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...