RockyLinux 10 : toolbox (RLSA-2025:13674)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding descriptio...

Unity Linux 20.1070e Security Update: nginx (UTSA-2025-986184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986184 advisory. NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986923 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Fix NULL pointer dereference by removing unnecessary structure field If driver rea...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987248 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digitalinsendsddreq 'skb' is allocated in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-commons-vfs (UTSA-2025-984774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984774 advisory. Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' paramete...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414396 advisory. A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2capreassemblesdu of the file...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414494 advisory. A use-after-free flaw was found in the Linux kernels sound subsystem in the way a user triggers concurrent calls of PCM hwparams. The hwfree ioctls or similar race...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414609 advisory. An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987417 advisory. Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987176 advisory. In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctlipautobindreuse. While reading sysctlipautobindreuse, it can be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987000)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987000 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984946 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxslt (UTSA-2025-986118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986118 advisory. A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984989)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984989 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414628 advisory. An issue was discovered in fs/iouring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service deadlock because exit may be waiting to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987096 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpprobethreshold. While reading sysctltcpprobethreshold, it ca...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414366 advisory. In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986648)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986648 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skbheaderpointer returns NULL in sctprcvootb We should always check if...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987146 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmaxreordering. While reading sysctltcpmaxreordering, it can b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414306 advisory. A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hcisock.c in the Linux Kernel. This flaw allows an...