Linux Distros Unpatched Vulnerability : CVE-2026-68191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called...

Linux Distros Unpatched Vulnerability : CVE-2026-19654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery ca...

RHEL 8 : kernel-rt (RHSA-2026:54247)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54247 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-68230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following...

Linux Distros Unpatched Vulnerability : CVE-2026-19566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any...

PT-2026-70981

The PSA Protected Storage credential backend subsys/net/lib/tls credentials/tls credentials trusted.c declared its credential-store mutex as a plain zero-filled static struct k mutex credential lock; and never called k mutex init on it. A statically zero-filled k mutex has an uninitialized wait...

PT-2026-71312

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

Security update for nodejs22 (important)

openSUSE security update: security update for nodejs22 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21545-1 Rating: important References: bsc1272882 bsc1272941 bsc1272942 bsc1272943 bsc1272944 bsc1272945 bsc1272947 bsc1272948 bsc1272949 bsc127295...

Linux Distros Unpatched Vulnerability : CVE-2026-68356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: airoha: Prevent division by zero when clock frequency is zero clkgetrate can return 0 when the clock provider is not properly configured or the clock ...

SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3548-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3548-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when t...

Security update for nodejs24 (important)

openSUSE security update: security update for nodejs24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21546-1 Rating: important References: bsc1272882 bsc1272941 bsc1272942 bsc1272943 bsc1272944 bsc1272945 bsc1272946 bsc1272947 bsc1272948 bsc127294...

RockyLinux 10 : kernel (RLSA-2026:53330)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:53330 advisory. kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-68305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed...

Linux Distros Unpatched Vulnerability : CVE-2026-68232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released,...

PT-2026-71332

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio component involves an integer underflow and out-of-bounds read during the parsing of Dynamic Host Configuration Protocol for IPv6 DHCPv6 packets. An unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-68150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount...

Linux Distros Unpatched Vulnerability : CVE-2026-68308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before...

Linux Distros Unpatched Vulnerability : CVE-2026-68334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: fix iothread race in rxrpcwakeupiothread rxrpcwakeupiothread checks local-iothread before waking it, but then reloads the pointer for wakeupprocess...

Linux Distros Unpatched Vulnerability : CVE-2026-68275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the...

SUSE SLED15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3560-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3560-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration...