Linux Distros Unpatched Vulnerability : CVE-2026-90246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix integer overflow in verifytags bounds check verifytags validates the tagset table unpacked from a policy blob. For each set it reads a count and...

Linux Distros Unpatched Vulnerability : CVE-2026-93313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc...

Linux Distros Unpatched Vulnerability : CVE-2026-90063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even...

Linux Distros Unpatched Vulnerability : CVE-2026-90435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix integer overflow of user QP buffer size setuserbufsize computes the QP buffer size by left-shifting the user-supplied rq.wqecnt and rq.wqeshift...

Linux Distros Unpatched Vulnerability : CVE-2026-90073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch with no overflow check. A device with a huge MTU...

EulerOS Virtualization 2.11.0 : glib2 (EulerOS-SA-2026-3503)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not...

EulerOS Virtualization 2.11.1 : glib2 (EulerOS-SA-2026-3416)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not...

Fedora 43 : firefox / nss (2026-d7ba4af112)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-d7ba4af112 advisory. NSS Release Notes Update NSS to 3.129.0 - Bug 2017322 - set CKANSSSERVERDISTRUSTAFTER for CN=Izenpe.com. - Bug 2025246 - fix unknown key error type ...

EulerOS Virtualization 2.11.1 : python-pillow (EulerOS-SA-2026-3463)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

EulerOS Virtualization 2.11.1 : iputils (EulerOS-SA-2026-3423)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo...

EulerOS Virtualization 2.11.1 : libarchive (EulerOS-SA-2026-3426)

According to the versions of the libarchive packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial o...

EulerOS Virtualization 2.11.0 : libssh2 (EulerOS-SA-2026-3521)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

Oracle Linux 8 : kernel (ELSA-2026-68531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68531 advisory. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost Izabela Bakollari RHEL-244096 CVE-2026-72298 - ipv6: sit: reload inner IPv6 header after...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-3684)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : locking/rtmutex: Skip removewaiter when waiter is not enqueuedCVE-2026-53163 IB/isert: Reject login PDUs shorter than ISERHEADERSLENCVE-2026-53176...

EulerOS Virtualization 2.12.0 : expat (EulerOS-SA-2026-3637)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...

EulerOS Virtualization 2.12.1 : expat (EulerOS-SA-2026-3583)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...

EulerOS Virtualization 2.11.1 : libssh2 (EulerOS-SA-2026-3434)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2026-3550)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that...

ROS-20260918-73-0021

The vulnerability of the vmloadvmsaveinterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise th...

EulerOS Virtualization 2.11.0 : libarchive (EulerOS-SA-2026-3513)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of...