Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001507 advisory. An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004386 advisory. In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001587 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000630 advisory. Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000814 advisory. An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. Tenable has extracted the...

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.415.AXS4.14 (AXSA:2014-502:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-502:05 advisory. Description : KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001599 advisory. Linux Kernel version 3.18 to 4.16 incorrectly handles an SGIO ioctl on /dev/sg0 with dxferdirection=SGDXFERFROMDEV and an empty 6-byte cmdp. This may lead to copying...

scsi: aic94xx: fix use-after-free in device removal path

...

CVE-2025-68818

A NULL pointer dereference flaw was found in the QLogic Fibre Channel HBA driver qla2xxx in the Linux kernel. During ISP error recovery, the abort path incorrectly assumes all command types are TYPESRB. When operating in SCSI target mode with TYPETGTCMD commands, this results in calling a NULL...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: scsi: qla2xxx: Wait for io return on terminate rport

A flaw was found in the Linux kernel’s SCSI driver component qla2xxx used with FCP-2 devices. When the terminaterportio function is invoked , the driver may exit cleanup before all outstanding I/O operations have returned. This can lead to a use-after-free condition when resources are freed while...

kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses

A bounds-checking flaw was found in the Linux kernel Small Computer System Interface Enclosure Services driver in the way descriptor pointers are validated while processing enclosure data. Missing checks could allow an out-of-bounds access during parsing. A local user could use this flaw to crash...

SUSE CVE-2025-68782

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset ttaskcdb pointer in error case If allocation of cmd-ttaskcdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL ttaskcdb value to point at the default fixed-size...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003152 advisory. An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. Tenable has extracted the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003242 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002759 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002651 advisory. The arcmsriopmessagexfer function in drivers/scsi/arcmsr/arcmsrhba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002347 advisory. Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memo...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003447 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...