Detections
Analytics
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002327)
medium Nessus Plugin ID 287039
Synopsis
The Unity Linux host is missing one or more security updates.Description
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002327 advisory.The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
Tenable has extracted the preceding description block directly from the Unity Linux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel package.See Also
http://www.nessus.org/u?07718e89
http://www.nessus.org/u?477a4719
http://www.nessus.org/u?d093a698
http://www.nessus.org/u?4de4c79d
http://www.nessus.org/u?0ac0b7ee
http://www.nessus.org/u?7f897196
http://www.nessus.org/u?2da45085
http://www.nessus.org/u?bf159f54
http://www.nessus.org/u?86f17557
http://www.nessus.org/u?30472a34
http://www.nessus.org/u?537c0f6e
http://www.nessus.org/u?7ada41c2
http://rhn.redhat.com/errata/RHSA-2015-1221.html
http://rhn.redhat.com/errata/RHSA-2015-1534.html
http://rhn.redhat.com/errata/RHSA-2015-1564.html
http://rhn.redhat.com/errata/RHSA-2015-1583.html
http://rhn.redhat.com/errata/RHSA-2015-1643.html
http://www.debian.org/security/2015/dsa-3290
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3
http://www.openwall.com/lists/oss-security/2015/05/02/5
http://www.nessus.org/u?7704c22a
http://www.securityfocus.com/bid/74450
http://www.securitytracker.com/id/1033186
http://www.ubuntu.com/usn/USN-2631-1
http://www.ubuntu.com/usn/USN-2632-1
http://www.ubuntu.com/usn/USN-2633-1
http://www.ubuntu.com/usn/USN-2634-1
https://bugzilla.redhat.com/show_bug.cgi?id=1218074
Plugin Details
Severity: Medium
ID: 287039
File Name: unity_linux_UTSA-2026-002327.nasl
Version: 1.1
Type: local
Published: 1/15/2026
Updated: 1/15/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.1
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2015-3636
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/UOS-Server/release, Host/UOS-Server/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 1/15/2026
Vulnerability Publication Date: 5/4/2015
Reference Information
CVE: CVE-2015-3636