Linux Distros Unpatched Vulnerability : CVE-2026-43161

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU,...

CVE-2026-31742

The CVE-2026-31742 issue affects the Linux kernel’s virtual terminal (vt) handling of alternate screen mode. When entering alt screen, vc_uni_lines is saved to vc_saved_uni_lines and vc_uni_lines is set to NULL. A subsequent console resize can skip reallocating the unicode buffer because vc_uni_l...

CVE-2026-31742 vt: discard stale unicode buffer on alt screen exit after resize

In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit after resize When enteraltscreen saves vcunilines into vcsavedunilines and sets vcunilines to NULL, a subsequent console resize via vcdoresize skips reallocating the unicode...

CLSA-2026-1777616064 kernel: Fix of 260 CVEs

crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010874 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up sidomain in the initdmars error path A splat from kmemcachedestroy was seen...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via manipulation of backup manifest files. An attacker can execute arbitrary commands in the production deployment environment by restoring a crafted backup. Workaround This vulnerability can be mitigated by specifying...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kube-arangodb, node-problem-detector, jaeger-operator, chartmuseum, kubernetes-dashboard-api, openbao, crossplane-provider-keycloak, mods, gke-gcloud-auth-plugin, flux-image-reflector-controller, azcopy, spark-operator, dapr, osv-scanner, kube-vip, influx, litestream...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kube-arangodb, node-problem-detector, jaeger-operator, chartmuseum, kubernetes-dashboard-api, openbao, go-md2man, gosu, wireguard-go, crossplane-provider-keycloak, mods, gke-gcloud-auth-plugin, flux-image-reflector-controller, gofumpt, azcopy,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, whereabouts-fips, zitadel, gitlab-workhorse-ce-fips, aws-flb-kinesis, cadvisor-fips, kubernetes-csi-external-snapshotter-fips, sftpgo-plugin-pubsub, seaweedfs-operator, loki, crossplane-provider-aws-efs-fips, spilo,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, whereabouts-fips, zitadel, gitlab-workhorse-ce-fips, aws-flb-kinesis, cadvisor-fips, kubernetes-csi-external-snapshotter-fips, sftpgo-plugin-pubsub, seaweedfs-operator, loki, crossplane-provider-aws-efs-fips, spilo,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, whereabouts-fips, zitadel, gitlab-workhorse-ce-fips, aws-flb-kinesis, cadvisor-fips, kubernetes-csi-external-snapshotter-fips, sftpgo-plugin-pubsub, seaweedfs-operator, loki, crossplane-provider-aws-efs-fips, spilo,...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35823)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35823 advisory. - In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruptio...

MiracleLinux 8 : microcode_ctl-20210216-1.20210525.1.el8 (AXSA:2021-2200:09)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2200:09 advisory. hw: vt-d related privilege escalation CVE-2020-24489 hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 hw: observab...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001517 advisory. A race condition in the Linux kernel before 5.5.7 involving VTRESIZEX could lead to a NULL pointer dereference and general protection fault. Tenable has extracted th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004080 advisory. A race condition in the Linux kernel before 5.5.7 involving VTRESIZEX could lead to a NULL pointer dereference and general protection fault. Tenable has extracted th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004014 advisory. A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. Tenable has extracted t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004523)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004523 advisory. A race condition in the Linux kernel before 5.5.7 involving VTRESIZEX could lead to a NULL pointer dereference and general protection fault. Tenable has extracted th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001382 advisory. There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001504 advisory. A race problem was seen in the vtkioctl in drivers/tty/vt/vtioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vcmode is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003916 advisory. There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vcdoresize function in drivers/tty/vt/vt.c. Tenable has extracted the preceding...