GLSA-202608-32 : Tor: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-32 Tor: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001502)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001502 advisory. In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this functio...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001501 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The devdbg&urb-dev-dev, ... which...

Linux Distros Unpatched Vulnerability : CVE-2026-42391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow...

Linux Distros Unpatched Vulnerability : CVE-2026-33604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001416 advisory. In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wrwait after setting maxusage Commit c73be61cede5 pipe: Add general notification que...

Unity Linux 20.1060a / 20.1070a Security Update: gstreamer1-plugins-bad-free (UTSA-2026-101049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101049 advisory. A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer...

Linux Distros Unpatched Vulnerability : CVE-2026-73208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the...

Linux Distros Unpatched Vulnerability : CVE-2026-82254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attacke...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001432 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue...

Linux Distros Unpatched Vulnerability : CVE-2026-40017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001463 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posixlockinode Light Hsieh reported a KASAN UAF warning...

Linux Distros Unpatched Vulnerability : CVE-2026-38820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/...

Linux Distros Unpatched Vulnerability : CVE-2026-80725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyond GROLEGACYMAXSIZE 64KB, BIG TCP should only be permitted f...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002303 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert tty: ngsm: fix UAF in gsmcleanupmux This reverts commit...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035854)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035854 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records do...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001401 advisory. In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmciresourceremove When removing a resource fr...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001445 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2filereaditer Syzbot has reported the following KMSAN splat...

Unity Linux 20.1070e Security Update: python-lxml (UTSA-2026-104952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104952 advisory. lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001393 advisory. In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the...