MiracleLinux 7 : libexif-0.6.22-1.el7 (AXSA:2020-584:04)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-584:04 advisory. libexif: out of bound write in exif-data.c CVE-2019-9278 libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry function ...

MiracleLinux 7 : firefox-78.13.0-2.0.1.el7.AXS7 (AXSA:2021-2372:23)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2372:23 advisory. Mozilla: Uninitialized memory in a canvas object could have led to memory corruption CVE-2021-29980 Mozilla: Incorrect instruction reordering during...

About Information Disclosure – MongoDB “MongoBleed” (CVE-2025-14847) vulnerability

About Information Disclosure - MongoDB "MongoBleed" CVE-2025-14847 vulnerability. MongoDB is a popular NoSQL database that stores data as JSON-like documents with an optional schema. The project is licensed under the SSPL. A flaw in MongoDB’s handling of the data length parameter during zlib...

MiracleLinux 7 : kernel-3.10.0-693.11.1.el7 (AXSA:2017-2489:10)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2489:10 advisory. It was found that the timer functionality in the Linux kernel ALSA subsystem is prone to a race condition between read and ioctl system call handlers,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000622 advisory. The sgioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004161 advisory. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaserusb/kvaserusbleaf.c driver, a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001240 advisory. The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001439)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001439 advisory. The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001179 advisory. The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002930 advisory. The vmwgbsurfacedefineioctl function accessible via DRMIOCTLVMWGBSURFACECREATE in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.11.4 defines a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002781 advisory. The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002537 advisory. The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002695 advisory. The walkhugetlbrange function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003481 advisory. The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obta...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003278 advisory. The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003446 advisory. The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002796 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002774 advisory. sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read...

CVE-2025-68799

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

Linux Distros Unpatched Vulnerability : CVE-2025-71113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialize...