Azure Linux 3.0 Security Update: kernel (CVE-2025-38071)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38071 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/mm: Check return value from...

ROS-20260121-73-0037

A vulnerability in the x86/mm component of the Linux operating system kernel is related to a flaw in the data security mechanism. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 9 : kernel-5.14.0-362.8.1.el9_3 (AXSA:2023-7038:31)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7038:31 advisory. kernel: net/sched: clsu32 component reference counter leak if tcfchangeindev fails CVE-2023-3609 kernel: net/sched: Use-after-free vulnerabilities i...

ROS-20260120-7357

A vulnerability in the drivers/gpu/drm/hyperv/hypervdrmdrv.c component of the Linux operating system kernel involves improper memory freeing before the last reference is deleted. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 8 : shim-unsigned-x64-15.4-4.el8.ML.2 (AXSA:2021-2174:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2174:02 advisory. grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 grub2: Use-after-free in rmmod...

Microsoft Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CNVD-2026-17152)

Microsoft Windows Ancillary Function Driver for WinSock is an ancillary function driver for Winsock from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock, which is caused by freeing memory in the WinSock Ancillary Function...

MiracleLinux 7 : kernel-3.10.0-693.21.1.el7 (AXSA:2018-2625:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2625:03 advisory. Kernel: KVM: MMU potential stack buffer overrun during page walks CVE-2017-12188, Important Kernel: KVM: debug exception via syscall emulation...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003756 advisory. The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, whic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004650 advisory. An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000976)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000976 advisory. The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, whic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003632 advisory. The Linux kernel before 5.1-rc5 allows page-refcount reference count overflow, with resultant use-after- free issues, if about 140 GiB of RAM exists. This is related...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000853 advisory. The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004211 advisory. A stack information leak flaw was found in s390/s390x in the Linux kernels memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout...

MiracleLinux 4 : kernel-2.6.32-279.19.1.el6 (AXSA:2013-97:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-97:01 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

iommu: disable SVA when CONFIG_X86 is set

...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002518 advisory. Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggering access to a paging structure by a different...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002448 advisory. The trytounmapcluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to caus...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002684 advisory. The oomreaptaskmm function in mm/oomkill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service TLB...

CVE-2025-71078

A Segment Lookaside Buffer SLB multi-hit error vulnerability was found in the Linux kernel's PowerPC 64-bit hash MMU implementation. When a process migrates between CPUs without triggering switchmmucontext because prev and next mmstruct are the same, the hardware SLB and software preload cache ca...

CVE-2025-71134

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to matc...