The vulnerabilities of the functions tun_get_user() and tun_xdp_one() in the drivers/net/tun.c file of the Linux kernel’s TUN/TAP virtual network interface driver allow a attacker to cause a service failure.

The vulnerability of the tungetuser and tunxdpone functions in the drivers/net/tun.c file of the Linux virtual network interface TUN/TAP driver leads to a lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the sftp_symlink() function in the src/sftp.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the sftpsymlink function in the src/sftp.c component of the SSH2 protocol implementation in the Libssh2 library is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitiv...

The vulnerabilities of the functions cgx_lmac_write() and cgx_lmac_read() in the driver file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the Linux operating system’s network controller driver for Marvell OcteonTX2 AF cores allow a hacker to cause service failures.

The vulnerabilities of the functions cgxlmacwrite and cgxlmacread in the file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the network controller driver for the Marvell OcteonTX2 AF in the Linux operating system are related to insufficient resource management during its existence. Exploitin...

The vulnerability of the _libssh2_packet_add() function in the src/packet.c component of the SSH2 implementation library Libssh2 allows a attacker to cause a service failure.

The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE SLED15 / SLES15 Security Update : python-tornado6 (SUSE-SU-2026:4076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4076-1 advisory. This update for python-tornado6 fixes the following issue - CVE-2026-82397: an unauthenticated request body containing...

EulerOS Virtualization 2.10.1 : krb5 (EulerOS-SA-2026-3836)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...

AlmaLinux 8 : apr-util (ALSA-2026:69113)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...

RHEL 9 : rhc (RHSA-2026:69105)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69105 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Linux Distros Unpatched Vulnerability : CVE-2026-93492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This...

Linux Distros Unpatched Vulnerability : CVE-2026-93749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values...

Linux Distros Unpatched Vulnerability : CVE-2026-93488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to...

SUSE SLED15 / SLES15 Security Update : python-tornado (SUSE-SU-2026:4073-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4073-1 advisory. This update for python-tornado fixes the following issue: - CVE-2026-82397: an unauthenticated request body containing...

Linux Distros Unpatched Vulnerability : CVE-2026-93491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single...

Linux Distros Unpatched Vulnerability : CVE-2026-93575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. T...

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

EulerOS Virtualization 2.10.0 : mod_http2 (EulerOS-SA-2026-3875)

According to the versions of the modhttp2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via maliciou...

Linux Distros Unpatched Vulnerability : CVE-2026-93590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image...

Linux Distros Unpatched Vulnerability : CVE-2026-93558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to...

Linux Distros Unpatched Vulnerability : CVE-2026-65969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...