Linux Distros Unpatched Vulnerability : CVE-2026-63929

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iiobufferenqueuedmabuf iiobufferenqueuedmabuf allocates ...

Linux Distros Unpatched Vulnerability : CVE-2026-16277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by th...

The vulnerability of the DHCP Server Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP Server Service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Important: xorg-x11-server

Issue Overview: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Affected Packages: xorg-x11-server Issue Correction: Run dnf update xorg-x11-server --releasever 2023.12.20260720 or dnf update --advisory ALAS2023-2026-1943 --releasever 2023.12.20260720 to update your system. More information...

Oracle Linux 9 : httpd (ELSA-2026-41906)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41906 advisory. - Resolves: RHEL-192752 - modproxyhtml regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflo...

Linux Distros Unpatched Vulnerability : CVE-2026-64035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igcfpeinitsmdframe initializ...

Linux Distros Unpatched Vulnerability : CVE-2026-64088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: fix negative ttbufflen batadvorignode::ttbufflen was declared as s16, but the field is never intended to hold a negative value. When a value...

Important: httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 Apache HTTP Server: modrewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation CVE-2026-24072 http...

Linux Distros Unpatched Vulnerability : CVE-2026-35591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly...

Linux Distros Unpatched Vulnerability : CVE-2026-64145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates...

UBUNTU-CVE-2026-61548

mmpstrucdata stack buffer overflow with oversized RFC5424 structured data...

Linux Distros Unpatched Vulnerability : CVE-2026-64132

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6event Reported by Sashiko: In ipv6hopioam, the...

Linux Distros Unpatched Vulnerability : CVE-2026-63938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buffer When processing Pa...

Linux Distros Unpatched Vulnerability : CVE-2026-64081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Validate framework notification message layout Framework notifications car...

Linux Distros Unpatched Vulnerability : CVE-2026-53380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers...

Linux Distros Unpatched Vulnerability : CVE-2026-63939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area When setting the length...

Linux Distros Unpatched Vulnerability : CVE-2026-63985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ethtool: eeprom: add more safeties to EEPROM Netlink fallback The Netlink fallback path for reading module EEPROM fallbacksetparams validates that offset totall...

Linux Distros Unpatched Vulnerability : CVE-2026-64091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. ...

RHEL 9 : httpd (RHSA-2026:41906)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41906 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

The vulnerability of the wazuh-analysisd module of the Wazuh security monitoring and threat detection platform allows a malicious actor to cause a service failure.

The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...