Linux Distros Unpatched Vulnerability : CVE-2026-68325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Bound the early ACPI HID map The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the sibling...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0046

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0046. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the smb2_calc_max_out_buf_len() function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability can allow an attacker to compromise the...

ROS-20260810-73-0031

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

The vulnerability of the digital_in_recv_sdd_res() function in the net/nfc/digital_technology.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the digitalinrecvsddres function in the net/nfc/digitaltechnology.c module of the NFC subsystem of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to influence the...

The vulnerabilities of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, are related to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-68143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: slip: serialize receive against buffer reallocation slreallocbufs replaces rbuff and updates buffsize while holding sl-lock. slipreceivebuf reads those...

Linux Distros Unpatched Vulnerability : CVE-2026-71969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS...

Linux Distros Unpatched Vulnerability : CVE-2026-68349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: fix buffer overflow in rxstream failover path The failover continuation in carl9170rxstream copies the full tlen from the second USB transfer...

Linux Distros Unpatched Vulnerability : CVE-2026-68213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

Linux Distros Unpatched Vulnerability : CVE-2026-68400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's epmemoffset to calculate the start of the endpoint memory access...

Linux Distros Unpatched Vulnerability : CVE-2026-68231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...

Linux Distros Unpatched Vulnerability : CVE-2026-68293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords...

Linux Distros Unpatched Vulnerability : CVE-2026-68135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buff...

Linux Distros Unpatched Vulnerability : CVE-2026-68353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in...

Linux Distros Unpatched Vulnerability : CVE-2026-68278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/dp/mst: fix buffer overflows in sideband chunk accumulation drmdpsidebandappendpayload has three related bugs when processing device-provided sideband reply...

MiracleLinux 9 : qemu-kvm-10.1.0-17.el9_8.4.ML.1 (AXSA:2026-1505:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1505:04 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Libuv PHSA-2024-5.0-91-0213

An update of the libuv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Bindutils PHSA-2023-5.0-91-0037

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow...