The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010805 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: geode - Fix PCI device refcount leak

    for_each_pci_dev() is implemented by pci_get_device(). The comment of     pci_get_device() says that it will increase the reference count for the     returned pci_dev and also decrease the reference count for the input     pci_dev @from if it is not NULL.

    If we break for_each_pci_dev() loop with pdev not NULL, we need to call     pci_dev_put() to decrease the reference count. We add a new struct     'amd_geode_priv' to record pointer of the pci_dev and membase, and then     add missing pci_dev_put() for the normal and error path.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - hwrng: geode - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The     comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and     also decrease the reference count for the input pci_dev @from if it is not NULL. If we break     for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count.
    We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing     pci_dev_put() for the normal and error path. (CVE-2022-50659)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013795 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: geode - Fix PCI device refcount leak

    for_each_pci_dev() is implemented by pci_get_device(). The comment of     pci_get_device() says that it will increase the reference count for the     returned pci_dev and also decrease the reference count for the input     pci_dev @from if it is not NULL.

    If we break for_each_pci_dev() loop with pdev not NULL, we need to call     pci_dev_put() to decrease the reference count. We add a new struct     'amd_geode_priv' to record pointer of the pci_dev and membase, and then     add missing pci_dev_put() for the normal and error path.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
309025	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010805)	Nessus	Unity Linux Local Security Checks	4/21/2026	4/21/2026	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	3/23/2026	high
278317	Linux Distros Unpatched Vulnerability : CVE-2022-50659	Nessus	Misc.	12/11/2025	2/4/2026	medium
309469	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013795)	Nessus	Unity Linux Local Security Checks	4/22/2026	4/26/2026	medium

Detections

Analytics

Plugins Search

medium

high

medium

medium