vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

Oracle Linux 8 : gstreamer1 (ELSA-2026-99090)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-99090 advisory. - CVE-2026-125704 gstreamer1: gstreamer: Use-after-free in GStreamer core buffer value deserialization Tenable has extracted the preceding description block...

Oracle Linux 8 : kernel (ELSA-2026-99015)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-99015 advisory. - net/smc: protect clcsock lifetime in smcgetname CKI Backport Bot RHEL-303989 CVE-2026-99032 - scsi: st: Fix use-after-free race between stremove and...

Oracle Linux 8 : kernel (ELSA-2026-98099)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-98099 advisory. - scsi: libiscsi: Validate the task named by a management response CKI Backport Bot RHEL-298434 CVE-2026-99152 - scsi: libiscsi: Validate the ITT...

Oracle Linux 8 : util-linux (ELSA-2026-96212)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96212 advisory. - fix RHEL-283368 - libblkid: validate EBR data CVE-2026-53615 - fix RHEL-215636 - libblkid: use-after-free in nested partition probing CVE-2026-13595...

Oracle Linux 8 : qt5-qtdeclarative (ELSA-2026-96075)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-96075 advisory. 5.15.3-3 - CVE-2025-12385 qt5-qtdeclarative: Improper validation of tag size in Text component parser Resolves: RHEL-287799 Tenable has extracted the preceding...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-96080)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96080 advisory. 2.54.2-2 - Update bundled Skia to aa789d9bd566 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-95638)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-95638 advisory. delve 1.26.1-2.0.1 1.26.1-2 - Add GOMODCACHE in %check - Resolves: RHEL-289505 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 1.25.2-1 - Update to...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500587)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500587 advisory. - iommu/amd: Force device table to maximum size Suravee Suthikulpanit Orabug: 40172716 CVE-2024-21963 Tenable has extracted the preceding...

Oracle Linux 8 : glibc (ELSA-2026-96087)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96087 advisory. - CVE-2026-86805: Dynamic linker privilege escalation in ATSECURE programs RHEL-267203 - CVE-2026-95818: Buffer overflow in dynamic linker processing...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500590)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500590 advisory. - Fix TSA microcode check for ZEN5 Dave Kleikamp Orabug: 40172717 CVE-2024-36350 CVE-2024-36357 CVE-2026-0004 - Fix Zen5 TSA Borislav Petkov AMD...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500588)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500588 advisory. - Fix TSA microcode check for ZEN5 Dave Kleikamp Orabug: 40172717 CVE-2024-36350 CVE-2024-36357 CVE-2026-0004 - Fix Zen5 TSA Borislav Petkov AMD...

Oracle Linux 9 : nodejs:24 (ELSA-2026-96226)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96226 advisory. - Fix out-of-bounds write in bundled Brotli decoder CVE-2026-111497 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 memory...

Oracle Linux 10 : ruby4.0 (ELSA-2026-96233)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96233 advisory. - Fix: integer overflow issue in regular expression compiler CVE-2026-110264 Resolves: RHEL-292062 - Fix: integer overflow issue in CI/CD regular...

Oracle Linux 10 : thunderbird (ELSA-2026-96079)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-96079 advisory. 153.6.0-1.0.1 - Add Oracle prefs 153.6.0-1 - Update to 153.6.0 ESR Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 10 : nodejs22 (ELSA-2026-96094)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96094 advisory. 1:22.23.4-1 - Rebase to 22.23.4 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : thunderbird (ELSA-2026-96081)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-96081 advisory. 153.6.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 153.6.0 - Add OpenELA debranding 153.6.0-1 - Update to 153.6.0 ESR Tenable h...

Oracle Linux 8 : dpdk (ELSA-2026-96083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96083 advisory. 23.11-3 - Backport fixes for CVE-2026-86846 CVE-2026-86848 CVE-2026-86561 CVE-2026-86562 CVE-2026-86563 CVE-2026-86567 CVE-2026-86566 CVE-2026-86849...

Oracle Linux 10 : curl (ELSA-2026-96092)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-96092 advisory. 8.12.1-4.el102.8 - fix HTTP/2 upload use-after-free in multidone CVE-2026-92392 Tenable has extracted the preceding description block directly from the Oracle...