Fedora 44 : chromium (2026-295354c8a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-295354c8a1 advisory. chromium security release 151.0.7922.169 CVE-2026-76034: Buffer overflow in WebGL CVE-2026-76036: Buffer overflow in Dawn CVE-2026-76033:...

Linux Distros Unpatched Vulnerability : CVE-2026-74613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop workers during the .remove made the RX worker jump to its commo...

Linux Distros Unpatched Vulnerability : CVE-2026-74639

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us144mkii: re-anchor capture URBs on resubmission captureurbcomplete resubmits each capture URB without anchoring it: usbgeturburb %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-74631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of ea...

Linux Distros Unpatched Vulnerability : CVE-2026-74714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: tcp: Fix use-after-free in bpfitertcpestablishedbatch reqskqueuehashreq publishes a TCPNEWSYNRECV requestsock onto the ehash chain, drops the bucket lock,...

Linux Distros Unpatched Vulnerability : CVE-2026-74609

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlock...

Linux Distros Unpatched Vulnerability : CVE-2026-74700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter...

Linux Distros Unpatched Vulnerability : CVE-2026-74634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is...

Linux Distros Unpatched Vulnerability : CVE-2026-74652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers are embedded in the devm-managed port and can fire after it is freed. The...

PT-2026-79682

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier work UAF on disconnect ipheth sndbulk callback re-arms the carrier-check work on any non-zero URB status: else schedule delayed work&dev-carrier work, 0; Nothing ties that to the interface being up, ...

PT-2026-79592

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip last asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp asconf queue teardown...

PT-2026-79594

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk redir use-after-free in send verdict sk psock msg verdict takes a socket reference for psock-sk redir. tcp bpf send verdict copies that pointer while holding the source socket lock, but does not take a...

PT-2026-79611

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs remove rec eventfs remove rec recursively removes the child at the current loop position. After the recursive call returns, list for each entry advances by reading list.next from the removed...

PT-2026-79639

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring buffer subbuf order set frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rb advan...

PT-2026-79619

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

CVE-2026-47895

strongSwan before 6.0.7 is affected by a double-free vulnerability in its identity parsing/cloning logic. When parsed EAP-Identities produce an empty but non-NULL encoding, the resulting duplicates are not correctly cloned, triggering a double-free upon destruction. The Fedora advisory characteri...

PT-2026-79613

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs try adding channels cifs try adding channels takes a temporary reference to an interface before dropping iface lock. If cifs ses add channel fails, it drops that reference and then incremen...

Linux Distros Unpatched Vulnerability : CVE-2026-74690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new...

Linux Distros Unpatched Vulnerability : CVE-2026-74628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer and cancelled with timerdelete, so a pending timer holds no...

PT-2026-79635

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6 dev get from resurrecting inet6 dev in6 dev get reads dev-ip6 ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these...