Linux Distros Unpatched Vulnerability : CVE-2026-12611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and t...

Linux Distros Unpatched Vulnerability : CVE-2026-89772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: write-protect folios during data writeback commit 095be159f3eb btrfs: unify folio dirty flag clearing replaced the foliocleardirtyforio call in...

Linux Distros Unpatched Vulnerability : CVE-2026-89524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen -= 4 and...

Linux Distros Unpatched Vulnerability : CVE-2026-89726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series lib/ucs2string.c: fix out-of- bounds read in ucs2strnlen, v2. This series fixes an off-by-o...

Linux Distros Unpatched Vulnerability : CVE-2026-80959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: bound the persisted tail-position offset cacheposdecode takes the persisted keytail and dirtytail segoff from the cache device and addresses within t...

Linux Distros Unpatched Vulnerability : CVE-2026-89607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against...

Fedora 45 : pdns-recursor (2026-6c1e0af917)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6c1e0af917 advisory. Update to 5.4.6 Resolves: rhbz2527899 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Linux Distros Unpatched Vulnerability : CVE-2026-89714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: fix delegationhashtable leak when nfs4servercommonsetup fails nfs4servercommonsetup allocates server-delegationhashtable first, but server-destroy - the on...

Linux Distros Unpatched Vulnerability : CVE-2026-81012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-89613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size. CVE-2026-89613 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2026-89484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lockd: fix NULL dereference on lockowner allocation failure nlmclntlocksinitprivate installs NLM file lock operations even when nlmclntfindlockowner fails to...

Linux Distros Unpatched Vulnerability : CVE-2026-54258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-89771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Fix subbuf resize race with ring buffer readers tracebuffer subbufsize is read lockless in ringbufferreadpage and ringbufferreadstart, while it can...

Linux Distros Unpatched Vulnerability : CVE-2026-89438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-90467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO...

Linux Distros Unpatched Vulnerability : CVE-2026-90461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...

Linux Distros Unpatched Vulnerability : CVE-2026-89491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series ocfs2: cluster: o2hbregionpin fixes, v2. This series fixes three related...

Fedora 45 : golang-x-perf (2026-09a9388be9)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-09a9388be9 advisory. Update to 19be9d8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-89600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer t...

Linux Distros Unpatched Vulnerability : CVE-2026-80928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must alwa...