Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004885 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in offlashprobeversatile offindmatchingnodeandmatch returns a node...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004918 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ohci-nxp: Fix refcount leak in ohcihcdnxpprobe ofparsephandle returns a node pointer with...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004911 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Fix refcount leak in mt8173rt5650rt5676devprobe ofparsephandle returns a...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21792)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21792 advisory. - In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount leak caused by settin...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46855)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46855 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsocket: fix sk refcount...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37905)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37905 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcou...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21745)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21745 advisory. - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @blockclass's...

MiracleLinux 9 : dhcp-4.4.2-18.b1.el9 (AXSA:2023-5581:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5581:03 advisory. dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort CVE-2022-2928 dhcp: DHCP memory leak CVE-2022-2929 Tenable has...

MiracleLinux 8 : dhcp-4.3.6-49.el8 (AXSA:2023-5859:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5859:04 advisory. dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort CVE-2022-2928 dhcp: DHCP memory leak CVE-2022-2929 Tenable has...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004013 advisory. The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004222 advisory. An issue was discovered in the Linux kernel before 5.0.6. In rxqueueaddkobject and netdevqueueaddkobject in net/core/net-sysfs.c, a reference count is mishandled, ak...

CVE-2025-68774

A race condition was found in the Linux kernel's HFS+ filesystem. When sync and link are called concurrently, two threads may attempt to create the same bnode simultaneously. If one thread reuses a bnode newly created by another thread without properly incrementing the reference count, a subseque...

CVE-2025-68779

A use-after-free vulnerability was found in the Mellanox mlx5 Ethernet driver in the Linux kernel. The PSP Platform Security Processor component is unregistered twice during device removal - once in mlx5eremove and again in mlx5eniccleanup. This double unregistration causes a refcount underflow,...

SUSE CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

CVE-2025-71107

In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fsputsuper finishes Xfstests generic/335, generic/336 sometimes crash with the following message: F2FS-fs dm-0: detect filesystem reference count leak during umount, type: 9, count: ...

SUSE CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001690 advisory. In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/afllc.c. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001398 advisory. pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. Tenable has extracted the preceding description block directly from the Uni...

AZL-74456 CVE-2025-68775 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshakenet-hnrequests list, but it is still present in the handshakerhashtbl until it is destroyed. If a...

CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...