CVE-2021-22556

The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond...

CVE-2024-34594

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address...

CVE-2023-25527

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...

Siemens SCALANCE, Ruggedcom ROX Exposure of Sensitive Information to an Unauthorized Actor (CVE-2022-1353)

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information. This plugin only works with Tenable.ot. Please visit...

CVE-1999-0295

Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges...

CVE-1999-0367

NetBSD netstat command allows local users to access kernel memory...

CVE-2019-7293

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000461 advisory. In the Linux kernel 4.4 through 5.7.6, usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000501 advisory. A stack information leak flaw was found in s390/s390x in the Linux kernels memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000245 advisory. A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000436 advisory. A memory leak in the bfadimgetstats function in drivers/scsi/bfa/bfadattr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000441 advisory. A memory leak in the rtl8xxxusubmitinturb function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel through 5.3.11 allows attackers to cau...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000266 advisory. An issue where a provided address with accessok is not checked was discovered in i915gemexecbuffer2ioctl in drivers/gpu/drm/i915/i915gemexecbuffer.c in the Linux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000253 advisory. In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000408)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000408 advisory. A memory leak in the qlalloclargebuffers function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000251 advisory. A memory leak in the qrtrtunwriteiter function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service memory consumption, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000427 advisory. Multiple memory leaks in the iwlpciectxtinfogen3init function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000240 advisory. An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to re...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000243 advisory. In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sasexpander.c when SAS expander discovery fails. This will cause a BUG and denial of...

UBUNTU-CVE-2025-68751

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpuvstl A false-positive kmsan report is detected when running ping command. An inline assembly instruction 'vstl' can write varied amount of bytes depending on value of 'index'...