Linux Distros Unpatched Vulnerability : CVE-2026-80947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtl8xxxu: fix use-after-free from rxurbwq on stop rtl8xxxu arms rxurbwq from the RX completion path: rtl8xxxurxcomplete hands the URB to rtl8xxxuqueuerxur...

Linux Distros Unpatched Vulnerability : CVE-2026-80974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the...

Linux Distros Unpatched Vulnerability : CVE-2026-89479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in...

Linux Distros Unpatched Vulnerability : CVE-2026-18495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-80987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NTB: ntbtransport: Reject oversized TX buffers ntbprocesstx handles an oversized buffer by calling txhandler with a NULL data pointer and returning success...

Fedora 45 : PackageKit (2026-95d69295a4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-95d69295a4 advisory. Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m, GHSA-gmhf-fxfx-m2w9 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-89750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/userevents: Clear copied tracing state before fork duplication duptaskstruct copies usereventmm from the parent into the child, without grabbing a...

Linux Distros Unpatched Vulnerability : CVE-2026-89600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer t...

Linux Distros Unpatched Vulnerability : CVE-2026-89553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the...

Linux Distros Unpatched Vulnerability : CVE-2026-89521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection...

Linux Distros Unpatched Vulnerability : CVE-2026-89680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix nfsdfile leak on inter-server COPY setup failure When nfsd4setupinterssc fails, nfsd4copy returns nfserroffloaddenied directly, bypassing the out: lab...

Linux Distros Unpatched Vulnerability : CVE-2026-89541

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: harden gssunwrapresppriv length checks gssunwrapresppriv validates the RPCSECGSS opaque length with offset = u8 p - u8 head-iovbase; if offset +...

Linux Distros Unpatched Vulnerability : CVE-2026-81008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - interconnect: Fix use after free in iccget and oficcgetbyindex In oficcgetbyindex and iccget, if the dynamic allocation for path-name fails via kasprintf, the...

Linux Distros Unpatched Vulnerability : CVE-2026-89622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcpi2csmbusread stores the caller- supplied buffer pointer in mcp-rxbuf for the duration of a...

Linux Distros Unpatched Vulnerability : CVE-2026-89482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 nvme-tcp: fix possible crash in writezeroes processing established that...

Linux Distros Unpatched Vulnerability : CVE-2026-89611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: validate non-resident attribute offsets ntfsattrupdatemeta shifts the attribute name when converting between non-sparse and sparse attributes. Converting ...

Linux Distros Unpatched Vulnerability : CVE-2026-89767

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovl: fix double endcreating on the casefold-mismatch path ovlcreatereal releases the new dentry twice when the casefold consistency check fails. The SIFDIR...

Linux Distros Unpatched Vulnerability : CVE-2026-80995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mctp: hold a reference to the route device in mctproutelookup mctproutelookup uses rt-dev without holding a reference on it. mctproutelookupsingle returns...

Linux Distros Unpatched Vulnerability : CVE-2026-89535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reorder rpcrdmarnunregister before rdmadestroyid svcrdmafree caches rdma-sccmid-device before teardown, then calls rdmadestroyidsccmid which frees the...

Linux Distros Unpatched Vulnerability : CVE-2026-80996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast...