The vulnerability of the hbh_mt6_check() function in the net/ipv6/netfilter/ip6t_hbh.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to access protected information or cause a service failure.

The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the nft_meta_bridge_get_eval() function in the net/bridge/netfilter/nft_meta_bridge.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nftmetabridgegeteval function in the net/bridge/netfilter/nftmetabridge.c module, which is part of the networking functions in the Linux kernel, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the __sctp_rcv_asconf_lookup() function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...

The vulnerability of the mcp23s08_probe() function in the drivers/pinctrl/pinctrl-mcp23s08_spi.c driver for Linux kernel’s PINCTRL output devices allows a hacker to cause a service failure.

The vulnerability of the mcp23s08probe function in the drivers/pinctrl/pinctrl-mcp23s08spi.c file of the Linux kernel’s GPIO controller driver is related to the pointer assignment. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the bond_do_ioctl() function in the drivers/net/bonding/bond_main.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bonddoioctl function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-85769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or...

Linux Distros Unpatched Vulnerability : CVE-2026-80808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking t...

Linux Distros Unpatched Vulnerability : CVE-2026-80756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences...

RHEL 8 : container-tools:rhel8 (RHSA-2026:63163)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63163 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/mail:...

Linux Distros Unpatched Vulnerability : CVE-2026-84964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cockpit (UTSA-2026-106156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106156 advisory. A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowi...

CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

AlmaLinux 8 : grafana-pcp (ALSA-2026:63124)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:63124 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servic...

The vulnerability of the nl80211_parse_rnr_elems() function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nl80211parsernrelems function in the net/wireless/nl80211.c module, which supports wireless communication in Linux operating systems, involves unlimited distribution of resources. Exploiting this vulnerability could allow attackers to compromise the confidentiality,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-106198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106198 advisory. The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-18149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length,...

Linux Distros Unpatched Vulnerability : CVE-2026-19534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106175 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106166 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

RockyLinux 9 : grafana-pcp (RLSA-2026:63136)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:63136 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...