Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001220 advisory. An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c. Tenable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001077 advisory. The tracewritebackdirtypage implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003998 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003913 advisory. A memory leak in the predicateparse function in kernel/trace/traceeventsfilter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service...

MiracleLinux 4 : curl-7.19.7-46.AXS4 (AXSA:2015-432:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-432:02 advisory. cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004406 advisory. In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001391 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004343 advisory. In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h. Tenable has extracted the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002829 advisory. An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c. Tenable...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002627 advisory. The tracewritebackdirtypage implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003448 advisory. An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c. Tenable...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002430 advisory. kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows loc...

CVE-2025-71125

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currently do not have a function to register perf events. This leads to calling the tracepoint register functions with a NULL function pointer which triggers:...

VulnCheck KEV: CVE-2020-26836

SAP Solution Manager Trace Analysis, version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the...

UBUNTU-CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68816

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fwtracer, Validate format string parameters Add validation for format string parameters in the firmware tracer to prevent potential security vulnerabilities and crashes from malformed format strings received from...

ROS-20260113-7357

A vulnerability in the prepareuprobebuffer function of the kernel/trace/traceuprobe.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected informati...

CVE-2010-0360

Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap...

CVE-2010-0386

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and CVE-2005-3398...

CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...