25110 matches found
PT-2026-90209
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 component of the Linux kernel where the ocfs2 validate refcount block function fails to validate the rl used and rl count variables against the actual on-dis...
CVE-2026-89754: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walkpmdrange If -pmdentry sets walk-action = ACTIONAGAIN, the pmdnone check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-installpte is not...
Fedora 45 : tkimg (2026-a23a377e11)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a23a377e11 advisory. Update to 2.1.1, update bundled libtiff to 4.7.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2026-77159: UNIX Symbolic Link (Symlink) Following
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2026-89626: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hidsensorcustomaddattributes creates one sysfs group for each custom sensor field. If sysfscreategroup fails after some groups have already been created, the function...
PT-2026-96433
In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap and validate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...
CVE-2026-80976: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decapandvalidate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...
CVE-2026-78807
An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...
PT-2026-96613
An issue in wpa supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...
Fedora 45 : python-asteval (2026-79e569db98)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79e569db98 advisory. Update to 1.0.10 Resolves: rhbz2413249 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)
The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...
CVE-2026-77159: UNIX Symbolic Link (Symlink) Following
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost function. The function uses a path-based chown on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd running as...
CVE-2026-89761: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...
RockyLinux 8 : glib2 (RLSA-2026:66451)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66451 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...
Linux Distros Unpatched Vulnerability : CVE-2026-89329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and...
PT-2026-96610
A flaw was found in multipathd. A local attacker with access to the multipathd UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the multipathd listener thread to block, leading to a Denial of Service DoS where...
CVE-2026-78807: Origin Validation Error
An issue in wpasupplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c...
Fedora 45 : chirp (2026-6627e39af0)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6627e39af0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...
CVE-2026-9176 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources...
