GLSA-202608-14 : X.Org X server, XWayland: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-14 X.Org X server, XWayland: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE identifiers referenced below for details. Tenable has extracted the...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote Windows host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099985 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099761 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100930 advisory. JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100928 advisory. Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101110 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100877 advisory. When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a or tag, potentially making a...

Linux Distros Unpatched Vulnerability : CVE-2026-72216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: qcom: Fix leak when custom dumpsegments addition fails Free allocated minidumpregion 'name' in qcomaddminidumpsegments when failing before adding th...

Linux Distros Unpatched Vulnerability : CVE-2026-74359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry it's pointing to becomes negative on eviction, realistically...

Linux Distros Unpatched Vulnerability : CVE-2026-74296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Release the HWprovided UAR index rather than the SW one Free the UAR index returned by the hardware. CVE-2026-74296 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-74455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: peakusb: validate uCAN receive record lengths pcanusbfddecodebuf walks uCAN records packed in one USB receive buffer. Require each record to contain the...

Linux Distros Unpatched Vulnerability : CVE-2026-74295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-72369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - minix: avoid overflow in bitmap block count calculation minixchecksuperblock uses minixblocksneeded to verify that the on-disk imap and zmap block counts are...

Linux Distros Unpatched Vulnerability : CVE-2026-74534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: fix refcounting of isoconn isoconndel and isochandel have a race that results to double-put of isoconn: Task hdev-workqueue Task 2 isoconndel...

Linux Distros Unpatched Vulnerability : CVE-2026-72365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFSRREQOFFLOADCOLLECTION on the request so that collection is processed...

Linux Distros Unpatched Vulnerability : CVE-2026-74356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all...

Linux Distros Unpatched Vulnerability : CVE-2026-74476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: convert fraglist skbs before running XDP A fraglist skb can reach veth with datalen set but nrfrags zero. vethconvertskbtoxdpbuff only converts skbs that...

Linux Distros Unpatched Vulnerability : CVE-2026-74397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5iballoctransportdomain allocates a transport domain and then may fail in...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...