The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000783 advisory.

    The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq     context, allows local guest administrators to cause a denial of service (scheduling while atomic error     and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the     interface.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002191 advisory.

    The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq     context, allows local guest administrators to cause a denial of service (scheduling while atomic error     and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the     interface.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001816 advisory.

    The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq     context, allows local guest administrators to cause a denial of service (scheduling while atomic error     and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the     interface.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2226-1 advisory.

    Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged     local user could exploit this flaw to obtain potentially sensitive information from kernel memory.
    (CVE-2014-1738)

    Matthew Daley reported a flaw in the handling of ioctl commands by the floppy disk driver in the Linux     kernel. An unprivileged local user could exploit this flaw to gain administrative privileges if the floppy     disk module is loaded. (CVE-2014-1737)

    A flaw was discovered in the handling of network packets when mergeable buffers are disabled for virtual     machines in the Linux kernel. Guest OS users may exploit this flaw to cause a denial of service (host OS     crash) or possibly gain privilege on the host OS. (CVE-2014-0077)

    Trk Edwin discovered a flaw with Xen netback driver when used with Linux configurations that do not     allow sleeping in softirq context. A guest administrator could exploit this flaw to cause a denial of     service (system crash) on the host. (CVE-2014-2580)

    A flaw was discovered in the Linux kernel's ping sockets. An unprivileged local user could exploit this     flaw to cause a denial of service (system crash) or possibly gain privileges via a crafted application.
    (CVE-2014-2851)

    Hannes Frederic Sowa reported a hash collision ordering problem in the xfs filesystem in the Linux kernel.
    A local user could exploit this flaw to cause filesystem corruption and a denial of service (oops or     panic). (CVE-2014-7283)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 3.13.9 stable update contains a number of important fixes across the tree. The 3.13.8 stable update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 3.13.8 stable update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
290419	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000783)	Nessus	Unity Linux Local Security Checks	high
286717	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002191)	Nessus	Unity Linux Local Security Checks	high
286602	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001816)	Nessus	Unity Linux Local Security Checks	high
74214	Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2226-1)	Nessus	Ubuntu Local Security Checks	medium
73428	Fedora 19 : kernel-3.13.9-100.fc19 (2014-4849)	Nessus	Fedora Local Security Checks	medium
73367	Fedora 20 : kernel-3.13.8-200.fc20 (2014-4675)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-2580

high

Tenable Plugins

high

high

high

medium

medium

medium