EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2026-3639)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c fil...

Linux Distros Unpatched Vulnerability : CVE-2026-93199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the...

Linux Distros Unpatched Vulnerability : CVE-2026-90120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu...

Linux Distros Unpatched Vulnerability : CVE-2026-90257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: virtiobt: avoid OOB read of build info string The virtbtsetupzephyr sends the Zephyr vendor command 0xfc08 Read Build Information and hands the...

Fedora 43 : GitPython (2026-c74ff43396)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c74ff43396 advisory. Update to 3.1.62 close RHBZ2529282 - Fixes GHSA-hmq2-w58f-27jc Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-90168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: retain connection for pending notify work Deferred CHANGENOTIFY work keeps an async message ID after the original request work is released. A durable...

Linux Distros Unpatched Vulnerability : CVE-2026-90310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized...

Linux Distros Unpatched Vulnerability : CVE-2026-90256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: use protolock for l2capdata to fix l2capdisconnind hciconn::l2capdata is accessed without locks in l2capdisconnind via hciconntimeout discwork...

MiracleLinux 9 : libsoup-2.72.0-16.el9_8.3 (AXSA:2026-1872:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1872:12 advisory. SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsou...

Linux Distros Unpatched Vulnerability : CVE-2026-93128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbdbacklight even when it was not successfully registered with t...

Linux Distros Unpatched Vulnerability : CVE-2026-92517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, riscv: Fix extable handling for arena loadacquire emitatomicldst returns 1 to have buildbody skip the zext after a sub-word loadacquire. The caller does re...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21861-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21861-1 advisory. Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH...

Linux Distros Unpatched Vulnerability : CVE-2026-90352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915pciinithif2 is only released on error paths that key off...

Linux Distros Unpatched Vulnerability : CVE-2026-92523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/nldev: validate dynamic counter attribute length RDMANLDEVATTRSTATHWCOUNTERS is a nested attribute whose children are consumed directly with nlagetu32. The...

Linux Distros Unpatched Vulnerability : CVE-2026-93072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/renesas-irqc: Fix generic interrupt chip leak on remove The driver allocates domain generic chips probe. However, on driver removal, the generic chips a...

Linux Distros Unpatched Vulnerability : CVE-2026-90368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: unwind state on addinterface failure When mt76wcidalloc fails, mt7915addinterface returned without clearing the vifmask/omacmask bits it had...

Linux Distros Unpatched Vulnerability : CVE-2026-90128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: fix wrong list iterated in adddirectchain error path In adddirectchain, newly allocated direct MR entries are added to the local list 'tmp', which is...

Linux Distros Unpatched Vulnerability : CVE-2026-90319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rapidio: clear mport-net when rioaddnet fails rioallocnet stores the newly allocated rionet in mport-net before rioscanallocnet registers the device. If rioaddn...

Linux Distros Unpatched Vulnerability : CVE-2026-90392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix potential UAF when reading bpf link info In bpflinkshowfdinfo and bpflinkgetinfobyfd, link-prog is accessed without holding any locks. If the prog is...

Linux Distros Unpatched Vulnerability : CVE-2026-90055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: usbatm: fix invalid cirange initialization syzbot reported a shift-out-of-bounds in vccconnect: UBSAN: shift-out-of-bounds in net/atm/common.c:382:32...