Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1254451. CVE-2022-50409: net: If sock is dead don't access sock's skwq in...

MiracleLinux 7 : kernel-3.10.0-1160.118.1.el7 (AXSA:2024-7723:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7723:11 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: kernel: use after free in unixstreamsendpage...

MiracleLinux 8 : kernel-4.18.0-425.10.1.el8_7 (AXSA:2023-4834:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4834:02 advisory. kernel: memory corruption in AX88179178A based USB ethernet device. CVE-2022-2964 kernel: i915: Incorrect GPU TLB flush can lead to random memory...

MiracleLinux 7 : kernel-3.10.0-1160.88.1.el7 (AXSA:2023-5218:08)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5218:08 advisory. kernel: stack overflow in doprocdointvec and procskipspaces CVE-2022-4378 kernel: use-after-free related to leaf anonvma double reuse CVE-2022-42703...

MiracleLinux 8 : kernel-4.18.0-477.15.1.el8_8 (AXSA:2023-6210:20)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6210:20 advisory. kernel: tls: race condition in dotlsgetsockopt may lead to use-after-free or NULL pointer dereference CVE-2023-28466 Tenable has extracted the preceding...

MiracleLinux 8 : kernel-4.18.0-372.26.1.el8_6 (AXSA:2022-3848:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3848:14 advisory. Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-2112...

MiracleLinux 7 : kernel-3.10.0-1160.76.1.el7 (AXSA:2022-3725:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3725:11 advisory. Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-2112...

MiracleLinux 8 : kernel-4.18.0-305.12.1.el8_4 (AXSA:2021-2359:18)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2359:18 advisory. kernel: race condition in net/can/bcm.c leads to local privilege escalation CVE-2021-3609 kernel: Improper handling of VMIO|VMPFNMAP vmas in KVM can...

MiracleLinux 8 : kernel-4.18.0-305.10.2.el8_4 (AXSA:2021-2266:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2266:16 advisory. kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller...

MiracleLinux 8 : kernel-4.18.0-372.16.1.el8_6 (AXSA:2022-3815:13)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3815:13 advisory. kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : kernel-5.14.0-503.14.1.el9_5 (AXSA:2024-9508:43)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9508:43 advisory. kernel: net: nexthop: Initialize all fields in dumped nexthops CVE-2024-42283 kernel: iommufd: Require drivers to supply the cacheinvalidateuser ops...

MiracleLinux 3 : kernel-2.6.18-53.14AXS3 (AXSA:2008-519:09)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-519:09 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Bugs fixed: CVE-2007-6417: The shmemgetpage function mm/shmem.c...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004524 advisory. An issue was discovered in drivers/accessibility/speakup/spkttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001025 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004149 advisory. A memory leak in the fastrpcdmabufattach function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004416 advisory. In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004026 advisory. The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgaconscrolldelta out-of-bounds read, aka CID-973c096f6a85. Tenable...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004022 advisory. In the Linux kernel 5.5.0 and newer, the bpf verifier kernel/bpf/verifier.c did not properly restrict the register bounds for 32-bit operations, leading to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000601 advisory. The ipxrecvmsg function in net/ipx/afipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003895 advisory. A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system. Tenable has...