Linux Distros Unpatched Vulnerability : CVE-2024-42098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ecdh - explicitly zeroize privatekey privatekey is overwritten with the key parameter passed in by the caller if present, or alternatively a newly...

Linux Distros Unpatched Vulnerability : CVE-2022-49575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Fix a data-race around sysctltcpthinlineartimeouts. While reading sysctltcpthinlineartimeouts, it can be changed concurrently. Thus, we need to add READONC...

Linux Distros Unpatched Vulnerability : CVE-2024-40776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6...

Linux Distros Unpatched Vulnerability : CVE-2022-49673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm raid: fix KASAN warning in raid5adddisks There's a KASAN warning in raid5adddisk when running the LVM testsuite. The warning happens in the test...

Linux Distros Unpatched Vulnerability : CVE-2023-32570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-49449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause null-ptr-deref when using 'res', if platformgetresource returns NULL, so...

Linux Distros Unpatched Vulnerability : CVE-2022-49443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - list: fix a data-race around ep-rdllist eppoll first calls epeventsavailable with no lock held and checks if ep-rdllist is empty by listemptycareful, which read...

Linux Distros Unpatched Vulnerability : CVE-2021-47045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfcprepelsiocb It is possible to call...

Linux Distros Unpatched Vulnerability : CVE-2024-42310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will...

Linux Distros Unpatched Vulnerability : CVE-2020-36318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the standard library in Rust before 1.49.0, VecDeque::makecontiguous has a bug that pops the same element more than once under certain condition. This bug...

Linux Distros Unpatched Vulnerability : CVE-2022-20369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2024-36929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: core: reject skbcopyexpand for fraglist GSO skbs SKBGSOFRAGLIST skbs must not be...

Linux Distros Unpatched Vulnerability : CVE-2023-52629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug The original code puts flushwork before timershutdownsync in switchdrvremove. Although w...

Linux Distros Unpatched Vulnerability : CVE-2024-26670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: entry: fix ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD Currently the ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD workaround isn't quite right, as it is supposed to be...

Linux Distros Unpatched Vulnerability : CVE-2022-49090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on...

Linux Distros Unpatched Vulnerability : CVE-2024-46679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the...

Linux Distros Unpatched Vulnerability : CVE-2022-49010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then pdata-coredataindx is already NULL and has been kfreed. Don't...

Linux Distros Unpatched Vulnerability : CVE-2024-27041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: fix NULL checks for adev-dm.dc in amdgpudmfini Since 'adev-dm.dc' in amdgpudmfini might turn out to be NULL before the call to...

Linux Distros Unpatched Vulnerability : CVE-2022-0393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-0393 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-29154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The serv...