423839 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-84359
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...
RockyLinux 8 : gegl (RLSA-2026:62425)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62425 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...
Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...
Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...
RockyLinux 8 : freerdp (RLSA-2026:62571)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62571 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...
The vulnerability of the iscsit_close_session() function in the drivers/target/iscsi/iscsi_target.c file of the Linux kernel’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.
The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the sock_recv_cmsgs() function in the include/net/sock.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sockrecvcmsgs function in the include/net/sock.h module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a malicious actor to cause a service failure.
The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the mpi3mr_probe() function in the drivers/scsi/mpi3mr/mpi3mr_os.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the bfqq_request_over_limit() function in the block/bfq-iosched.c module exposes the block-level support for the Linux operating system, allowing a hacker to cause a service failure.
The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the bareudp_fillmetadata dst() function in the drivers/net/bareudp.c module of the Linux kernel network device driver allows a attacker to cause a service failure.
The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nested_sync_control_from_vmcb02() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow ...
AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:62631)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...
AlmaLinux 10 : go-fdo-server (ALSA-2026:62578)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62578 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 encoding/asn1: golang: Go...
Linux Distros Unpatched Vulnerability : CVE-2026-84368
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the...
MiracleLinux 8 : kernel-4.18.0-553.156.1.el8_10 (AXSA:2026-1750:72)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1750:72 advisory. kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in...
The vulnerability in the function amdgpu_dm_hpd_init() of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel allows a attacker to cause a service failure.
The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...
The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.
The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability in the `fbcon_rotate_font()` function of the `drivers/video/fbdev/core/fbcon_rotate.c` driver for Linux kernel-based graphics buffer devices allows a attacker to disclose sensitive information or cause system failures.
The vulnerability of the fbconrotatefont function in the drivers/video/fbdev/core/fbconrotate.c driver for Linux kernel-based graphics buffer devices is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to disclose...