13484 matches found
CVE-2026-46189 RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that pvrdmauarfree is already called within pvrdmadeallocucontext, so calling it before triggers a double free...
Photon OS 5.0: Kafka PHSA-2026-5.0-0855
An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
VMware Spring AI 安全漏洞
VMware Spring AI is a development framework from VMware that integrates Artificial Intelligence and Large Language Modeling capabilities in the Spring ecosystem. A security vulnerability exists in VMware Spring AI versions 1.1.0 through 1.1.x. The vulnerability stems from a failure to clean up...
Astra Linux – Vulnerability in open-vm-tools
open-vm-tools contains a file descriptor hijacking vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the QEMU implementation of VMWare’s paravirtual RDMA device. This flaw allows a malicious guest driver to allocate and initialize a large number of page tables, which can be used as a ring of descriptors for CQ and async events. This could potentially lead to out-of-bound...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create the ttmresourcemanager entry in debugfs only if necessary. The driver creates /sys/kernel/debug/dri/0/mobttm even when the corresponding ttmresourcemanager is not allocated. This leads to a crash when trying to...
VMware Fusion 25H2 < 26H1 Local Privilege Escalation (VMSA-2026-0003)
The version of VMware Fusion installed on the remote macOS host is 25H2 prior to 26H1. It is, therefore, affected by a vulnerability: - VMware Fusion contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with loca...
Photon OS 4.0: Curl PHSA-2026-4.0-1020
An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Expat PHSA-2026-4.0-1013
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Gstreamer PHSA-2026-4.0-1015
An update of the gstreamer package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1015. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-43098 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
CVE-2026-43100 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
CVE-2026-43104 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
CVE-2026-43105 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-3W37-M4PG-Q585 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-8P2W-G92W-F4X3 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-azure, linux-qemu-rc, linux-vmware, linux-gcp, linux-aws...
GHSA-FVVW-8GW5-VW5F vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...
GHSA-P3HP-QCHJ-85WC vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-vmware, linux-gcp, linux-aws...