ovpn Heap Buffer Overflow DoS

The vulnerability of the ovpnnlpeersetdoit function in the Linux kernel’s OVPN component is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Oracle Linux 8 : pcre2 (ELSA-2026-81613)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81613 advisory. - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 Tenable has extracted the preceding description block directly from the Oracle Linux...

CentOS Linux 8.5 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.5:CLSA-2026:1791916248)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791916248 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Oracle Linux 9 : curl (ELSA-2026-80511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80511 advisory. - fix cookie injection via trailing dot super cookies CVE-2026-8924 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : kernel (ELSA-2026-77689)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77689 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...

PT-2026-113430

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62840: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8643-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8643-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Oracle Linux 8 : perl-DBI (ELSA-2026-77576)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-8644-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8644-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8646-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8646-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Oracle Linux 9 : thunderbird (ELSA-2026-80694)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80694 advisory. 140.17.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR Tenab...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8634-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8634-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-82015)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82015 advisory. 1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves:...

Oracle Linux 9 : python-tornado (ELSA-2026-82040)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-82040 advisory. 6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

ROS-20261013-73-0494

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c driver for AMD GPU cores in Linux operating systems is related to improper resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261013-73-0144

The vulnerability of the atmelaesbuffinit function in the drivers/crypto/atmel-aes.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

Ubuntu 24.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8886-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8886-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...