openSUSE 16: lastlog2 / libblkid-devel / libblkid-devel-static / libblkid1 / etc (openSUSE-SU-2026:21905-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21905-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when settin...

PT-2026-98580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ivpu component where tracing log headers parsed by the fw log print buffer function reside in DMA-shared Buffer Objects BOs writable by the NPU firmware...

CVE-2026-98130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTPCMDTIMERSTART The SCTPCMDTIMERSTART handler checks timerpending before calling timerreduce. The timer can expire and detach between these operations, causing timerreduce to rearm the timer without...

CVE-2026-98130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTPCMDTIMERSTART The SCTPCMDTIMERSTART handler checks timerpending before calling timerreduce. The timer can expire and detach between these operations, causing timerreduce to rearm the timer without...

CVE-2026-98130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTPCMDTIMERSTART The SCTPCMDTIMERSTART handler checks timerpending before calling timerreduce. The timer can expire and detach between these operations, causing timerreduce to rearm the timer without...

CVE-2026-98130

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTPCMDTIMERSTART The SCTPCMDTIMERSTART handler checks timerpending before calling timerreduce. The timer can expire and detach between these operations, causing timerreduce to rearm the timer without...

Linux Distros Unpatched Vulnerability : CVE-2026-98130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix a TOCTOU race in SCTPCMDTIMERSTART The SCTPCMDTIMERSTART handler checks timerpending before calling timerreduce. The timer can expire and detach betwe...

PT-2026-98792

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TOCTOU Time-of-Check to Time-of-Use race condition exists in the SCTP CMD TIMER START handler. The issue occurs when the handler checks timer pending before calling timer reduce; if th...

Linux Distros Unpatched Vulnerability : CVE-2026-97916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Validate firmware log buffer metadata The tracing log headers parsed by fwlogprintbuffer reside in DMA-shared BOs that the NPU firmware can write to...

Oracle Linux 7 : abrt (ELSA-2026-69121)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69121 advisory. - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-93216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against...

Oracle Linux 7 : abrt (ELSA-2026-48866)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48866 advisory. - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenable has extracted the preceding description block directly from the Oracl...

SUSE CVE-2026-93216

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

AZL-103538 CVE-2026-93216 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

DEBIAN-CVE-2026-93216

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

CVE-2026-93216

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

UBUNTU-CVE-2026-93216

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.6. It arises because fwlogprintbuffer reads metadata from the firmware log buffer from shared memory again, resulting in a TOCTOU race condition between checking and using it. This may cause the host to dereference an out-of-bounds address...

EUVD-2026-85945

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against tail pages and NULL data. However, it later re-reads page-memcgdata...

CVE-2026-93216

The Linux kernel contains a Time-of-Check to Time-of-Use (TOCTOU) vulnerability in mm/page_owner. The function print_page_owner_memcg() initially reads page->memcg_data but subsequently re-reads it locklessly in page_memcg_check(page) and PageMemcgKmem(page). If a page is concurrently freed an...