GHSA-FGQH-527Q-6HX4 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

GHSA-F3Q5-7M6P-4QXQ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

GHSA-8VC2-H54Q-6258 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

CVE-2026-53229 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

GHSA-37PV-M98R-VGM8 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

GHSA-2WQP-VX6W-RVFX vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

CVE-2026-53228 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

GHSA-3886-873F-6XPF vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

CVE-2026-53230 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-azure, linux-gcp, linux-qemu, linux-vmware...

kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...

PYSEC-2026-869 OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service

The VMWare driver in OpenStack Compute Nova before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service resource consumption by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: thi...

PYSEC-2026-872 OpenStack Nova VMware instance leak potentially leading to compute DoS

The VMware driver in OpenStack Compute Nova before 2014.1.4 allows remote authenticated users to cause a denial of service disk consumption by deleting an instance in the resize state...

Photon OS 4.0: Docker PHSA-2026-4.0-1050

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1050. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Spring Cloud - Remote Code Execution

Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions are susceptible to remote code execution vulnerabilities. When using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and...

kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: x86/vmware: Fixed hypercall clobbering issues Fedora QA reported the following panic: BUG: Unable to handle a page fault for address: 0000000040003e54 PF: Supervisor write access in kernel mode PF: Errorcode0x0002 – Not-presen...

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.

Summary IBM java SDK is used by VMware Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

Photon OS 5.0: Linux PHSA-2026-5.0-0888

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0888. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Bindutils PHSA-2026-4.0-1035

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Nginx PHSA-2026-4.0-1036

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...