Linux Distros Unpatched Vulnerability : CVE-2026-90303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARM: 9485/1: mm: acquire mmap write lock around showpte for user faults When CONFIGDEBUGUSER=y, and cmdline userdebug=31 is set, a user fault may trigger showpt...

Linux Distros Unpatched Vulnerability : CVE-2026-90207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize input teardown with eventinput sndmidiinputevent must not be running while a rawmidi substream is closing, since this can lead to the...

Linux Distros Unpatched Vulnerability : CVE-2026-90213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firewire: core: fix memory leak in error path of buildtree In the error path of buildtree, node instances can remain in the local linked list when the function...

EulerOS 2.0 SP10 : libXfont2 (EulerOS-SA-2026-3698)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS 2.0 SP10 : python3 (EulerOS-SA-2026-3719)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a...

Linux Distros Unpatched Vulnerability : CVE-2026-93051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group...

Oracle Linux 8 : kernel (ELSA-2026-68531)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68531 advisory. - net: qrtr: fix 32-bit integer overflow in qrtrendpointpost Izabela Bakollari RHEL-244096 CVE-2026-72298 - ipv6: sit: reload inner IPv6 header after...

Linux Distros Unpatched Vulnerability : CVE-2026-93395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. T...

EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-3634)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check...

EulerOS Virtualization 2.11.0 : unbound (EulerOS-SA-2026-3566)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs...

Linux Distros Unpatched Vulnerability : CVE-2026-93105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - esp: do not unref managed frag pages in espssgunref espssgunref releases the page references held on the source scatterlist after the AEAD operation completes. ...

Linux Distros Unpatched Vulnerability : CVE-2026-93183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/lima: call drmmminit with a valid allocation range limavmcreate is currently run before vastart and vaend are set up, meaning they are both 0. limavmcreate...

EulerOS Virtualization 2.11.1 : autogen (EulerOS-SA-2026-3400)

According to the versions of the autogen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function strstrsse2. The...

Amazon Linux 2 : kernel (ALAS-2026-3929)

The version of kernel installed on the remote host is prior to 4.14.355-284.746. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3929 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardhead...

Oracle Linux 9 : perl-Net-DNS (ELSA-2026-68786)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68786 advisory. - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG Tenable has extracted the preceding description block directly from the...

EulerOS Virtualization 2.12.1 : python3 (EulerOS-SA-2026-3609)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XM...

Linux Distros Unpatched Vulnerability : CVE-2026-93043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow interpreter fallback for gotox insn The interpreter does not recognize the BPFJMP|BPFJA|BPFX insn, which is used for insnarray map. Thereafter, it...

Fedora 44 : evolution (2026-99a4ff5552)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-99a4ff5552 advisory. Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859. Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109817 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...

Linux Distros Unpatched Vulnerability : CVE-2026-90321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate inline xattrs during inode block validation Patch series ocfs2: validate xattr entry bounds, v7. This series validates OCFS2 xattr entry...