Azure Linux 3.0 Security Update: kernel (CVE-2025-21748)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21748 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57973)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57973 advisory. - In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22081)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22081 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows...

MiracleLinux 8 : sysstat-11.7.3-9.el8 (AXSA:2023-5718:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5718:02 advisory. sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : kernel-4.18.0-513.5.1.el8_9 (AXSA:2023-7313:32)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7313:32 advisory. kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 kernel: net/sched: multiple vulnerabilities CVE-2023-3609, CVE-2023-3611, CVE-2023-412...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004808 advisory. An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004807 advisory. An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMA...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000550 advisory. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000773 advisory. The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service use-after-free or possibly have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000912 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003099 advisory. A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002155 advisory. The xenfailsafecallback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002637 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002328 advisory. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4uncompress function in lib/lz4/lz4decompress.c in the Linu...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001838 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

CVE-2025-71109

In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 "MIPS: Tracing: Reduce the overhead of dynamic Function Tracer", the macro UASMiLAmostly has been used, and this macro can...

RUSTSEC-2026-0003 Non-constant-time code generation on ARM32 targets

Summary While the cmov crate has a special backend for aarch64 which uses special CSEL instructions, on 32-bit ARM it uses a portable pure Rust fallback implementation. This implementation uses a combination of bitwise arithmetic and core::hint::blackbox to attempt to coerce constant-time code...

USN-7953-1 php7.2, php7.4, php8.1, php8.3, php8.4 vulnerabilities

It was discovered that PHP incorrectly handled memory while reading images in multi-chunk mode. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.04 and Ubuntu 25.10. CVE-2025-14177 It was discovered that PHP incorrectl...

OPENSUSE-SU-2026:10033-1 libtasn1-6-32bit-4.21.0-1.1 on GA media

These are all security issues fixed in the libtasn1-6-32bit-4.21.0-1.1 package on the GA media of openSUSE Tumbleweed...

HTTPS Fetch, Linux Execute Command

Fetch and execute an RISC-V 32-bit payload from an HTTPS server. Execute an arbitrary command Module Options msf use payload/cmd/linux/https/riscv32le/exec msf payloadexec show actions ...actions... msf payloadexec set ACTION msf payloadexec show options ...show and set options... msf payloadexec...