Linux Distros Unpatched Vulnerability : CVE-2026-34517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart form fields, aiohttp read the entire...

Linux Distros Unpatched Vulnerability : CVE-2026-25833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509inetptonipv6 function CVE-2026-25833 Note that Nessus relies on the presence o...

The vulnerability of the `swap_inode_boot_loader()` function in the `fs/ext4/ioctl.c` file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the swapinodebootloader function in the fs/ext4/ioctl.c file of the Ext4 file system in the Linux operating system is related to incorrect initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_fc_record_modified inode() function in the fs/ext4/fast_commit.c module of the Ext4 file system in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the ext4fcrecordmodified inode function in the fs/ext4/fastcommit.c module of the Ext4 file system in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xsk_build_skb() function in the net/xdp/xsk.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xskbuildskb function in the net/xdp/xsk.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_mbrelease_group_pa() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4mbreleasegrouppa function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a...

Linux Distros Unpatched Vulnerability : CVE-2026-23416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in currend, and then upon iterating to the next VMA updated currstar...

Linux Distros Unpatched Vulnerability : CVE-2026-5314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File...

Linux Distros Unpatched Vulnerability : CVE-2026-34441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling...

Linux Distros Unpatched Vulnerability : CVE-2026-23401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so after dropping/zapping the existing SP...

Linux Distros Unpatched Vulnerability : CVE-2025-13763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB...

Linux Distros Unpatched Vulnerability : CVE-2026-24029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the earlyacldrop earlyACLDrop in Lua option is disabled default is enabled on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skippe...

Linux Distros Unpatched Vulnerability : CVE-2026-34043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service DoS vulnerabili...

Linux Distros Unpatched Vulnerability : CVE-2026-24028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-34982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user...

Linux Distros Unpatched Vulnerability : CVE-2026-34956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can sen...

Linux Distros Unpatched Vulnerability : CVE-2026-5282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-5276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from...

The vulnerability of the crc_t10dif_arch() function in the arch/arm/lib/crc-t10dif-glue.c file, which is part of the ARM platform support for the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the crct10difarch function in the arch/arm/lib/crc-t10dif-glue.c file, which is part of the ARM platform support for the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...