Linux Distros Unpatched Vulnerability : CVE-2026-74725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - enic: fix txhangreset use-after-free on device removal enicremove cancels the reset and changemtuwork items but does not cancel txhangreset. A TX timeout that...

Linux Distros Unpatched Vulnerability : CVE-2026-74586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCON...

Fedora 44 : chromium (2026-295354c8a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-295354c8a1 advisory. chromium security release 151.0.7922.169 CVE-2026-76034: Buffer overflow in WebGL CVE-2026-76036: Buffer overflow in Dawn CVE-2026-76033:...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21609-1 Rating: critical References: bsc1275706 Cross-References: CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037...

PT-2026-79618

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rx run is clear. That exit still refills the RX queue...

PT-2026-79613

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs try adding channels cifs try adding channels takes a temporary reference to an interface before dropping iface lock. If cifs ses add channel fails, it drops that reference and then incremen...

PT-2026-79665

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt nflog: pin the NFLOG backend nf log unregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the logger from a per-net binding. However, ebt nflog passes an explici...

PT-2026-79639

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ring buffer subbuf order set frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rb advan...

PT-2026-79611

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs remove rec eventfs remove rec recursively removes the child at the current loop position. After the recursive call returns, list for each entry advances by reading list.next from the removed...

PT-2026-79682

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier work UAF on disconnect ipheth sndbulk callback re-arms the carrier-check work on any non-zero URB status: else schedule delayed work&dev-carrier work, 0; Nothing ties that to the interface being up, ...

PT-2026-79635

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6 dev get from resurrecting inet6 dev in6 dev get reads dev-ip6 ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these...

PT-2026-79594

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk redir use-after-free in send verdict sk psock msg verdict takes a socket reference for psock-sk redir. tcp bpf send verdict copies that pointer while holding the source socket lock, but does not take a...

Linux Distros Unpatched Vulnerability : CVE-2026-74642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb: Fix UAF at delayed release of MIDI2 EPs The recent fix for UAF in umptoendpoint caused another UAF because it tries to dereference the UMP endpoint...

Linux Distros Unpatched Vulnerability : CVE-2026-74731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g...

Linux Distros Unpatched Vulnerability : CVE-2026-74727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: skip rehash for peers already removed from byid ovpnnlpeersetdoit resolves the target peer via ovpnpeergetbyid before taking ovpn-lock. In the window...

Linux Distros Unpatched Vulnerability : CVE-2026-74630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can...

Linux Distros Unpatched Vulnerability : CVE-2026-76021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-74677

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else...

Linux Distros Unpatched Vulnerability : CVE-2026-74660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the...

Linux Distros Unpatched Vulnerability : CVE-2026-74688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference...