Linux Distros Unpatched Vulnerability : CVE-2026-90173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: smbdirect: free completion queues with ibfreecq smbdirectconnectiondestroyqp creates the send and receive completion queues with iballoccqany, which for...

Linux Distros Unpatched Vulnerability : CVE-2026-90060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all associated kcontrol elements with naive assumptions...

Linux Distros Unpatched Vulnerability : CVE-2026-90433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: oc-tiny: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with...

Linux Distros Unpatched Vulnerability : CVE-2026-90263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and...

Linux Distros Unpatched Vulnerability : CVE-2026-93119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: ljca: bound banknum in ljcaenumerategpio ljcaenumerategpio reads desc-banknum from the device and loops validpini = getunalignedle32... for i banknum...

Microsoft Edge (Chromium) < 153.0.4234.46 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.46. It is, therefore, affected by multiple vulnerabilities as referenced in the September 17, 2026 advisory. - Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypas...

Linux Distros Unpatched Vulnerability : CVE-2026-90176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == e...

Linux Distros Unpatched Vulnerability : CVE-2026-90314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: fix OOB read via signed offset in rsctableforeachentry table-offseti is a u32 from firmware, but was stored into a signed int. A crafted offset like...

Linux Distros Unpatched Vulnerability : CVE-2026-90122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: visconti: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to specify...

Linux Distros Unpatched Vulnerability : CVE-2026-90206

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix maxqid race between configfs and controller allocation The function nvmetsubsysattrqidmaxstore can race against nvmetallocctrl when a subsystem's...

Linux Distros Unpatched Vulnerability : CVE-2026-93167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - csky: Fix a4/a5 restoration in syscall trace path The syscall trace path reloads syscall arguments from ptregs before calling the syscall handler. On C-SKY ABIv...

Linux Distros Unpatched Vulnerability : CVE-2026-93118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: aspeedudc: check endpoint DMA allocation astudcprobe allocates a coherent DMA buffer used as the backing store for endpoint buffers. astudcinitep...

Linux Distros Unpatched Vulnerability : CVE-2026-90355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: clear stale link state on full reset After a full chip reset, mac80211 reconfig replays interface, link and channel context setup...

Linux Distros Unpatched Vulnerability : CVE-2026-90336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: core: clear freed pointers on uartregisterdriver failure uartregisterdriver leaves drv-state pointing to freed memory when ttyallocdriver fails. If...

Linux Distros Unpatched Vulnerability : CVE-2026-90109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gredenqueue, bfifoenqueue and plugenqueue admit a packet when the current backlog plus the...

Linux Distros Unpatched Vulnerability : CVE-2026-90136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/hsmp: Reject negative power cap writes in hwmon hsmphwmonwrite takes the user- supplied hwmon value as a signed long and assigns val /...

Linux Distros Unpatched Vulnerability : CVE-2026-92513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/manaib: drain QP references after partial table insertion manatablestoreudqp publishes a QP at its send-queue id before inserting the receive-queue id,...

Linux Distros Unpatched Vulnerability : CVE-2026-90261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: zoned: flush active metadata block group at btreewritepages start btreewritepages writes the btree inode's dirty metadata in ascending logical address...

Linux Distros Unpatched Vulnerability : CVE-2026-93057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context TX EQTR may run while devfreq gear scaling has quiesced the UFS tagset. In that...

Linux Distros Unpatched Vulnerability : CVE-2026-93117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the...