Detections
Analytics
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000613)
medium Nessus Plugin ID 290983
Synopsis
The Unity Linux host is missing one or more security updates.Description
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000613 advisory.The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page.
The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
Tenable has extracted the preceding description block directly from the Unity Linux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel package.See Also
https://usn.ubuntu.com/3583-2/
http://www.nessus.org/u?a70bb91f
http://www.nessus.org/u?acad0cae
http://www.nessus.org/u?ab3a65cf
http://seclists.org/oss-sec/2017/q4/52
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8
http://www.securityfocus.com/bid/101911
https://access.redhat.com/errata/RHSA-2018:0654
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2018:1854
https://access.redhat.com/errata/RHSA-2019:1170
https://access.redhat.com/errata/RHSA-2019:1190
https://bugzilla.redhat.com/show_bug.cgi?id=1495089
http://www.nessus.org/u?0224f037
http://www.nessus.org/u?ecac4ae4
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
https://security-tracker.debian.org/tracker/CVE-2017-12190
http://www.nessus.org/u?c1bc4783
https://usn.ubuntu.com/3582-1/
Plugin Details
Severity: Medium
ID: 290983
File Name: unity_linux_UTSA-2026-000613.nasl
Version: 1.1
Type: local
Published: 1/16/2026
Updated: 1/16/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2017-12190
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/UOS-Server/release, Host/UOS-Server/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 1/14/2026
Vulnerability Publication Date: 9/21/2017
Reference Information
CVE: CVE-2017-12190