ROS-20261013-73-0219

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20261013-73-0037

The vulnerability of the tpmi2cinfineon.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0063

The vulnerability of the greybus/light.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0006

The vulnerability in the net/ipv4/icmp.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows: CVE-2026-70027: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96309: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0417

The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...

ROS-20261013-73-0494

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c driver for AMD GPU cores in Linux operating systems is related to improper resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261013-73-0144

The vulnerability of the atmelaesbuffinit function in the drivers/crypto/atmel-aes.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

ROS-20261013-73-0460

The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8646-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8646-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Oracle Linux 8 : pcre2 (ELSA-2026-81613)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81613 advisory. - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 Tenable has extracted the preceding description block directly from the Oracle Linux...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8645-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8645-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8630-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8630-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Oracle Linux 9 : thunderbird (ELSA-2026-80694)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80694 advisory. 140.17.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR Tenab...

Oracle Linux 9 : python-tornado (ELSA-2026-82040)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-82040 advisory. 6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8634-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8634-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-82015)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82015 advisory. 1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves:...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8643-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8643-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4631-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak...