The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004405 advisory.

    In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race     condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect     against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak.

  - CVE-2020-2732     Paulo Bonzini discovered that the KVM implementation for     Intel processors did not properly handle instruction     emulation for L2 guests when nested virtualization is     enabled. This could allow an L2 guest to cause privilege     escalation, denial of service, or information leaks in     the L1 guest.

  - CVE-2020-8428     Al Viro discovered a use-after-free vulnerability in the     VFS layer. This allowed local users to cause a     denial-of-service (crash) or obtain sensitive     information from kernel memory.

  - CVE-2020-10942     It was discovered that the vhost_net driver did not     properly validate the type of sockets set as back-ends.
    A local user permitted to access /dev/vhost-net could     use this to cause a stack corruption via crafted system     calls, resulting in denial of service (crash) or     possibly privilege escalation.

  - CVE-2020-11565     Entropy Moe reported that the shared memory filesystem     (tmpfs) did not correctly handle an 'mpol' mount option     specifying an empty node list, leading to a stack-based     out-of-bounds write. If user namespaces are enabled, a     local user could use this to cause a denial of service     (crash) or possibly for privilege escalation.

  - CVE-2020-11884     Al Viro reported a race condition in memory management     code for IBM Z (s390x architecture), that can result in     the kernel executing code from the user address space. A     local user could use this for privilege escalation.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2199 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c (CVE-2019-19768)

    * Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause     kernel panic (CVE-2020-10711)

    * Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation     (CVE-2020-11884)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [FJ8.1 Bug]: A system panic occurs when an I/O timeout occurs. (BZ#1787296)

    * [i40e]BUG: unable to handle kernel NULL pointer dereference at 0000000000000029 (BZ#1802483)

    * [OSP16] [offload] [mellanox] VF representors of 2nd nic of bond is NOT renamed as <PF>_<VFid>     (BZ#1802484)

    * The kernel crashes in nbd_check_sock_type() due to stack corruption if the socket address family is     AF_INET6. (BZ#1807605)

    * Hung kernel tasks with LPm16004B-L when fabric paths are returning (BZ#1807831)

    * bitops: protect variables in set_mask_bits() macro (kernel) (BZ#1809042)

    * [RHEL8] blktests block/007 test failed (BZ#1812806)

    * [RHEL8.2 Alpha] Server panics with NULL pointer dereference during boot in selinux_task_to_inode()     (BZ#1812807)

    * [RHEL8] Kernel panic on job cleanup, related to SyS_getdents64 (BZ#1812808)

    * [HPE 8.2 Bug] kernel ignores NMI from ilo (BZ#1816830)

    * [RHEL8.2][Azure]Commits to resolve high network latency (BZ#1817944)

    * cpu.share scheduling performance issue (BZ#1819908)

    * [RHEL8] Scheduler - backport asymetrical and misfit enhancements (BZ#1821370)

    * RHEL8.0 - powerpc/powernv: Enhance opal message read interface (BZ#1822205)

    * SCSI updates for 8.2 (BZ#1822252)

    Enhancement(s):

    * [RFE] Backport RCU dependecies for kernel-rt (rhel-rt-8.2.0) from stable (BZ#1826215)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004121 advisory.

    In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race     condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect     against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4345-1 advisory.

    Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades     for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of     service (system crash) or execute arbitrary code. (CVE-2020-11884)

    It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash).
    (CVE-2019-16234)

    Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race     condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose     sensitive information. (CVE-2019-19768)

    It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local     attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of     service (system crash). (CVE-2020-10942)

    It was discovered that the OV51x USB Camera device driver in the Linux kernel did not properly validate     device metadata. A physically proximate attacker could use this to cause a denial of service (system     crash). (CVE-2020-11608)

    It was discovered that the STV06XX USB Camera device driver in the Linux kernel did not properly validate     device metadata. A physically proximate attacker could use this to cause a denial of service (system     crash). (CVE-2020-11609)

    It was discovered that the Xirlink C-It USB Camera device driver in the Linux kernel did not properly     validate device metadata. A physically proximate attacker could use this to cause a denial of service     (system crash). (CVE-2020-11668)

    It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition.
    A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive     information. (CVE-2020-8648)

    Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     possibly expose sensitive information. (CVE-2020-9383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
287990	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004405)	Nessus	Unity Linux Local Security Checks	1/16/2026	1/16/2026	high
136124	Debian DSA-4667-1 : linux - security update	Nessus	Debian Local Security Checks	4/30/2020	3/27/2024	high
136717	RHEL 8 : kernel (RHSA-2020:2199)	Nessus	Red Hat Local Security Checks	5/20/2020	11/7/2024	high
137190	Photon OS 3.0: Linux PHSA-2020-3.0-0100	Nessus	PhotonOS Local Security Checks	6/6/2020	8/22/2025	high
288540	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004121)	Nessus	Unity Linux Local Security Checks	1/16/2026	1/17/2026	high
136088	Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4345-1)	Nessus	Ubuntu Local Security Checks	4/29/2020	8/27/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high