12228 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000161)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000161 advisory. Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it. Tenable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000301)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000301 advisory. An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idralloc fails in genlregisterfamily in net/netlink/genetlink.c. Tenable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000192)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000192 advisory. A memory leak in the kernelreadfile function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service memory consumption by...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000424)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000424 advisory. An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000287)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000287 advisory. In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000418)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000418 advisory. btrfsrootnode in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcudereferenceroot-node can be zero. Tenable has...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000341)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000341 advisory. A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000345)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000345 advisory. There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000407)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000407 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000360)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000360 advisory. In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000171)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000171 advisory. An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000177)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000177 advisory. An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate method allows remote attackers t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000475)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000475 advisory. mwifiextmcmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000413)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000413 advisory. In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000311)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000311 advisory. An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000528)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000528 advisory. In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000364)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000364 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000425)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000425 advisory. In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-000165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000165 advisory. An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs e.g., an excessi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000218)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000218 advisory. An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in...