MiracleLinux 4 : procps-3.2.8-45.AXS4.3 (AXSA:2018-3135:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3135:01 advisory. procps-ng, procps: Integer overflows leading to heap overflow in file2strvec CVE-2018-1124 procps-ng, procps: incorrect integer size in proc/alloc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004328 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001625 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004202)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004202 advisory. An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalkprocexit, related to net/appletalk/atalkproc.c, net/appletalk/ddp.c, and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003627 advisory. An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000747 advisory. The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorre...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004636)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004636 advisory. In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003748 advisory. An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001229 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003953 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001297 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

MiracleLinux 7 : kernel-3.10.0-957.10.1.el7 (AXSA:2019-3842:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3842:02 advisory. Security Fix - net/core/sock.c skclonelock Type Confusion CVE-2018-9568 - fs/proc/base.c procpidstack root CVE-2018-17972 - kernel/bpf/verifier.c...

runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects

A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

runc: container escape via 'masked path' abuse due to mount race conditions

A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instea...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001877 advisory. Buffer overflow in the exitcodeprocwrite function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003270 advisory. The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorre...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002973 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field, whic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002638 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...