Linux Distros Unpatched Vulnerability : CVE-2026-42395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The logi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001421 advisory. In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stmregisterdevice The putdevice&stm-dev call will trigger...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001426 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001476 advisory. In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: assign irq bypass producer token correctly We used to call irqbypassunregisterproducer...

Linux Distros Unpatched Vulnerability : CVE-2026-15603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035851 advisory. NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain...

FreeBSD : phpBB -- multiple vulnerabilities (4d06b948-a323-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4d06b948-a323-11f1-a655-3497f65b111b advisory. The phpBB Team reports: Changes since 3.3.16: Improper state verification in OAuth implementation...

Unity Linux 20.1070e Security Update: rubygem-websocket-driver (UTSA-2026-104953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104953 advisory. websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001447 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prpcreatetaggedframe The prpfillrct function can fail. In that...

Unity Linux 20.1070a Security Update: libgcrypt (UTSA-2026-104991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104991 advisory. Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002709 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001471)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001471 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4extinsertextent As Ojaswin mentioned in Link, in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002968)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002968 advisory. A race condition was found in the Linux kernel's sound/hda device driver in sndhdacregmapsync function. This can result in a null pointer dereference issue, possibly...

Linux Distros Unpatched Vulnerability : CVE-2026-33263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running i...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002821 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIGDMAAPIDEBUGSG results...

Linux Distros Unpatched Vulnerability : CVE-2026-82255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlle...

Linux Distros Unpatched Vulnerability : CVE-2026-40019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This c...

Linux Distros Unpatched Vulnerability : CVE-2026-42008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that hos...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...