PT-2026-71044

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile function...

PT-2026-70972

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.7 Description A remote attack can trigger a reachable assertion within the CER Handler component. The issue resides in the diam log func function located in the lib/diameter/common/init.c file. Recommendations...

PT-2026-71039

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

PT-2026-70949

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexec load2 path file mode == 0 passes the user-space segment buffer straight to strnc...

PT-2026-70980

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The Intel ALH digital-audio-interface driver contains an issue where the dai alh get properties function in drivers/dai/intel/alh/alh.c fails to validate the range of the caller-supplied strea...

ALSA-2026:54371 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash...

RHEL 8 : kernel-rt (RHSA-2026:54247)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54247 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-68230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following...

Linux Distros Unpatched Vulnerability : CVE-2026-19654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery ca...

SUSE SLES15 Security Update : nodejs22 (SUSE-SU-2026:3557-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3557-1 advisory. Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

Linux Distros Unpatched Vulnerability : CVE-2026-68389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciqca: Clear memdump state on invalid dump size qcacontrollermemdump allocates qca-qcamemdump before processing the first dump packet. For a...

Linux Distros Unpatched Vulnerability : CVE-2026-68167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes BUG There is a syzbot report that the...

The vulnerability of the functions __cdnsp_gadget_init() and cdnsp_gadget_exit() in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/base/regmap/regmap-slimbus.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `drivers/media/rc/imon.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/iio/accel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/iio/accel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called...

Linux Distros Unpatched Vulnerability : CVE-2026-68378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpll: fix NULL pointer dereference in dpllmsgaddpinrefsync When a dpllpin is shared across multiple dplldevice instances and those devices are being unregistere...

RockyLinux 9 : isns-utils (RLSA-2026:53847)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...