ROS-20261013-73-0294

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0060

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

ROS-20261013-73-0440

The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-82015)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82015 advisory. 1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves:...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8643-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8643-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8645-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8645-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

Oracle Linux 8 : pcre2 (ELSA-2026-81613)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81613 advisory. - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 Tenable has extracted the preceding description block directly from the Oracle Linux...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8634-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8634-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8629-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8629-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

CentOS Linux 8.5 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.5:CLSA-2026:1791916248)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791916248 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Oracle Linux 8 : perl-DBI (ELSA-2026-77576)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...

Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8637-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8637-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : curl (ELSA-2026-80511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80511 advisory. - fix cookie injection via trailing dot super cookies CVE-2026-8924 Tenable has extracted the preceding description block directly from the Oracle Lin...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8646-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8646-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Oracle Linux 9 : kernel (ELSA-2026-77689)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77689 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...

UBUNTU-CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

ROS-20261013-73-0467

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...