The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000694 advisory.

    The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before     3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random     seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the     predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002484 advisory.

    The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before     3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random     seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the     predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002322 advisory.

    The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before     3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random     seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the     predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2290-1 advisory.

    Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol (PPP) when used with the Layer     Two Tunneling Protocol (L2TP). A local user could exploit this flaw to gain administrative privileges.
    (CVE-2014-4943)

    Salva Peir discovered an information leak in the Linux kernel's media- device driver. A local attacker     could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-1739)

    A bounds check error was discovered in the socket filter subsystem of the Linux kernel. A local user could     exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions.
    (CVE-2014-3144)

    A remainder calculation error was discovered in the socket filter subsystem of the Linux kernel. A local     user could exploit this flaw to cause a denial of service (system crash) via crafted BPF instructions.
    (CVE-2014-3145)

    A flaw was discovered in the Linux kernel's handling of hugetlb entries. A local user could exploit this     flaw to cause a denial service (memory corruption or system crash). (CVE-2014-3940)

    Don Bailey and Ludvig Strigeus discovered an integer overflow in the Linux kernel's implementation of the     LZ4 decompression algorithm, when used by code not complying with API limitations. An attacker could     exploit this flaw to cause a denial of service (memory corruption) or possibly other unspecified impact.
    (CVE-2014-4611)

    Tuomas Rsnen reported the Linux kernel on certain Intel processors does not properly initialize random     seeds for network operations, causing TCP sequence numbers, TCP and UDP port numbers and IP ID values to     be predictable. A remote attacker could exploit this flaw to spoof or disrupt IP communication.
    (CVE-2014-7284)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
291116	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000694)	Nessus	Unity Linux Local Security Checks	high
287657	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002484)	Nessus	Unity Linux Local Security Checks	high
287338	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002322)	Nessus	Unity Linux Local Security Checks	high
76569	Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2290-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2014-7284

high

Tenable Plugins

high

high

high

medium