Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000594 advisory. Integer overflow in the sgstartreq function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003698 advisory. In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sasexpander.c when SAS expander discovery fails. This will cause a BUG and denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003590 advisory. An issue was discovered in drivers/scsi/qedi/qedidbg.c in the Linux kernel before 5.1.12. In the qedidbg family of functions, there is an out-of-bounds read. Tenable...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001536 advisory. An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000613 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004386 advisory. In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001495 advisory. An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsitransportiscsi.c is adversely affected by the ability of an unprivileged user to craft...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001507 advisory. An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001599 advisory. Linux Kernel version 3.18 to 4.16 incorrectly handles an SGIO ioctl on /dev/sg0 with dxferdirection=SGDXFERFROMDEV and an empty 6-byte cmdp. This may lead to copying...

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.415.AXS4.14 (AXSA:2014-502:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-502:05 advisory. Description : KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000814 advisory. An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001587 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000630 advisory. Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memo...

scsi: aic94xx: fix use-after-free in device removal path

...

CVE-2025-68818

A NULL pointer dereference flaw was found in the QLogic Fibre Channel HBA driver qla2xxx in the Linux kernel. During ISP error recovery, the abort path incorrectly assumes all command types are TYPESRB. When operating in SCSI target mode with TYPETGTCMD commands, this results in calling a NULL...

kernel: scsi: qla2xxx: Wait for io return on terminate rport

A flaw was found in the Linux kernel’s SCSI driver component qla2xxx used with FCP-2 devices. When the terminaterportio function is invoked , the driver may exit cleanup before all outstanding I/O operations have returned. This can lead to a use-after-free condition when resources are freed while...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses

A bounds-checking flaw was found in the Linux kernel Small Computer System Interface Enclosure Services driver in the way descriptor pointers are validated while processing enclosure data. Missing checks could allow an out-of-bounds access during parsing. A local user could use this flaw to crash...

SUSE CVE-2025-68782

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset ttaskcdb pointer in error case If allocation of cmd-ttaskcdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL ttaskcdb value to point at the default fixed-size...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003242 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...