UBUNTU-CVE-2026-97920

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

UBUNTU-CVE-2026-97577

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...

Linux Distros Unpatched Vulnerability : CVE-2026-79616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path. CVE-2026-79616 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2026-88840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox TLS getclienthello reads past the end of the input buffer when parsing a truncated ClientHello message. CVE-2026-88840 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-98123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration sctpverifyasconf walks ASCONF-ACK parameters with sctpwalkparams, which advances by...

CVE-2026-97560

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading separator but uses strlensmbtarget+1 as the length, reading one byte...

Linux Distros Unpatched Vulnerability : CVE-2026-98039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Require MEMPERCPU for percpu kptr stores mapkptrmatchtype treats permflags as the set of register type flags that a kptr field permits. Adding MEMPERCPU to...

Linux Distros Unpatched Vulnerability : CVE-2026-97059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length...

Linux Distros Unpatched Vulnerability : CVE-2026-97565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server...

Linux Distros Unpatched Vulnerability : CVE-2026-98155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/qaic: Address potential out-of-bounds read in respworker Although 'commit 2feec5ae5df7 accel/qaic: Handle DBC deactivation if the owner went away' fixes t...

CVE-2026-98111

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value lengths btintelparseversiontlv verifies that a complete TLV is present in the response, but it does not ensure that the value is long enough for the specific TLV type. A short value...

CVE-2026-93834: Use After Free

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

openSUSE 16 Security Update : amazon-ssm-agent (openSUSE-SU-2026:21884-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21884-1 advisory. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library bsc127868...

UBUNTU-CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

UBUNTU-CVE-2026-98088

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information for the PCI device, such as single-socket boards that don't expose...

Linux Distros Unpatched Vulnerability : CVE-2026-97529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Validate BSG requestlen before reading vendorcmd The FC BSG transport allocates job-request via memdupuser using the exact user-supplied...

Linux Distros Unpatched Vulnerability : CVE-2026-97971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nstree: check listing permission before taking a namespace reference legitimizens takes a reference on the candidate namespace before maylistns has decided...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_53-default / etc (SUSE-SU-2026:1125-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1125-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: -...

RHEL 9 : kernel (RHSA-2026:71700)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71700 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to...

CVE-2025-7766

CVE-2025-7766 PoC Exploit 用于利用CVE-2025-7766中XML外部实体漏洞的PoC。演示文件读取（/etc/passwd）和带外HTTP回调。 作者 : Byte Reaper CVE : CVE-2025-7766 漏洞类型 : 通过XML外部实体（XXE）实现远程代码执行 利用CVE-2025-7766中XXE的PoC。演示： 从目标读取/etc/passwd。 向你的服务器触发带外HTTP请求。 依赖 gcc libcurl argparse library 构建 gcc -o exploit exploit.c argparse.c -lcurl ...