The vulnerability of the ttm_bo_evict() function in the drivers/gpu/drm/ttm/ttm_bo.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ttmboevict function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability...

The vulnerability of the cifs_oplock_break() function in the fs/smb/client/file.c module of the SMB client support library in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cifsoplockbreak function in the fs/smb/client/file.c module of the SMB client support library in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nested_vmcb02_prepare_control() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability...

The vulnerability of the ucan_probe() function in the drivers/net/can/usb/ucan.c module of the Linux network device driver stack allows a attacker to cause a service failure.

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the usblp_cache_device_id_string() function in the drivers/usb/class/usblp.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the amdgpu_ttm_init_on_chip() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c driver for AMD GPU cores in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper resource release. Exploiting this vulnerability may allow a remote...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21713-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21713-1 advisory. Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934...

MiracleLinux 8 : java-21-openjdk-21.0.12.1.1-1.1.el8.ML.1 (AXSA:2026-1749:11)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1749:11 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-55858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector...

AlmaLinux 8 : nodejs:24 (ALSA-2026:62583)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62583 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

AlmaLinux 8 : perl-DBI (ALSA-2026:62667)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62667 advisory. perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. CVE-2026-10879 DBI: DBI: Buffer overflow i...

Linux Distros Unpatched Vulnerability : CVE-2026-71221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on- disk inode metadata is used as a loop bound without...

Linux Distros Unpatched Vulnerability : CVE-2026-84380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header...

Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 (RHSA-2026:62558)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62558 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

Oracle Linux 10 / 8 / 9 : microcode_ctl (ELSA-2026-500239)

The remote Oracle Linux 10 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500239 advisory. 4:20260812-0.1 - update to 20260812, resolves: CVE-2026-20705, CVE-2026-20707, CVE-2026-20708, CVE-2026-20712, CVE-2026-20713, CVE-2026-2071...

RHEL 9 : osbuild-composer (RHSA-2026:62803)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62803 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory. 0.9.6-17 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves:...

Oracle Linux 8 : ELSA-2026-62425-0: / gegl (ELSA-2026-624250)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-624250 advisory. 0.2.0-40.1 - Fix local code execution vulnerability in rgbereadscanlines CVE-2026-18300 Resolves: RHEL-246592 Tenable has extracted the preceding description...

MiracleLinux 8 : wget-1.19.5-16.el8_10 (AXSA:2026-1745:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1745:01 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to...