The vulnerability of the `tcp_bpf_send_verdict()` function in the `net/ipv4/tcp_bpf.c` module, which is part of the IPv4 protocol implementation in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gmap_helper_zap_one_page() function in the arch/s390/mm/gmap_helpers.c module, which is part of the S390 platform support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gmaphelperzaponepage function in the arch/s390/mm/gmaphelpers.c module, which is part of the S390 platform support for Linux operating systems, stems from insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow an attacker to...

Oracle Linux 9 : python-urwid (ELSA-2026-58952)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...

The vulnerability of the rxgk_do_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality and accessibility of protected information, as it supports session sockets in the Linux operating system’s kernel.

The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Important: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

AlmaLinux 10 : nginx (ALSA-2026:59220)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59220 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

ALSA-2026:59362 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

ROS-20260825-73-0016

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

RockyLinux 9 : nginx:1.24 (RLSA-2026:59490)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59490 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

The vulnerability of the ext2_fill_super() function in the fs/ext2/super.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to an invalid negative shift operation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the __blk_crypto_evict_key() function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkcryptoevictkey function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, is related to an incorrect check on the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the ip6_datagram_send_ctl() function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6datagramsendctl function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snd_pcm_attach_substream()` function in the sound/core/pcm.c module, which is part of the Linux operating system’s audio card support mechanism, allows a hacker to cause a service failure.

The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver module/video/fbdev/smscufx.c of the Linux operating system’s kernel-based video buffer device allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the driver module/video/fbdev/smscufx.c driver for kernel-based Linux device buffer devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of the functions hisi_sas_slot_task_free(), hisi_sas_release_task() in the module drivers/scsi/hisi_sas/hisi_sas_main.c, and dereg_device_v3_hw() in the module drivers/scsi/hisi_sas/hisi_sas_v3_hw.c of the Linux operating system allow a attacker to compromise the integrity of protected information or cause service failures.

The vulnerabilities of the functions hisisasslottaskfree, hisisasreleasetask in the module drivers/scsi/hisisas/hisisasmain.c, and deregdevicev3HW in the module drivers/scsi/hisisas/hisisasv3HW.c of the Linux kernel are related to synchronization errors when using shared resources. Exploiting the...

The vulnerability of the `sof_card_dai_links_create()` function in the `sound/soc/intel/boards/sof_sdw.c` file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sofcarddailinkscreate function in the sound/soc/intel/boards/sofsdw.c kernel module of the Linux operating system is related to a single-issue error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions ext4_register_sysfs() and ext4_unregister_sysfs() in the fs/ext4/sysfs.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ext4registersysfs and ext4unregistersysfs in the fs/ext4/sysfs.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the kvm_get_vcpu_by_cpuid() function in the arch/loongarch/kvm/vpu.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmgetvcpubycpuid function in the arch/loongarch/kvm/vpu.c module, which is part of the LoongArch architecture support for the Linux operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow ...

RHEL 10 : nginx (RHSA-2026:59220)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59220 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

PT-2026-81898

Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...