Linux Distros Unpatched Vulnerability : CVE-2026-90005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/damon/wsse: handle damonstart failure Patch series samples/damon: handle damonstart,stop failures. All DAMON sample modules are not correctly handling...

Linux Distros Unpatched Vulnerability : CVE-2026-89913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic-v3: take an LPI reference in vgicv3savependingtables vgicv3savependingtables iterates dist-lpixa using xaforeach and dereferences the returned...

Linux Distros Unpatched Vulnerability : CVE-2026-76163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If BIND is loaded with a named.conf file that contains no global options block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure...

Linux Distros Unpatched Vulnerability : CVE-2026-90041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to sonydevicelist before HID core registers their input devices...

Linux Distros Unpatched Vulnerability : CVE-2026-90008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: megaraidsas: Limit NVMe request size to the PRP chain frame megasasmakeprpnvme builds a command's PRP list in cmd-sgframe, a DMA pool buffer of...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:67524)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67524 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 Bug Fixes and Enhancements: Update .NET 8.0 to SDK 8.0.131 and Runtime...

Linux Distros Unpatched Vulnerability : CVE-2026-89808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset...

SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:4190-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4190-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-46116:...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-259-01)

The version of mozilla-firefox installed on the remote host is prior to 140.16.0esr / 153.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-259-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

TencentOS Server 4: corosync (TSSA-2026:1005)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1005 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-89852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-67524)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67524 advisory. 8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 Tenable has extracted the...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS : SimpleSAMLphp vulnerabilities (USN-8770-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8770-1 advisory. It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML...

Linux Distros Unpatched Vulnerability : CVE-2026-90046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagealloc: don't spintrylock in NMI on UP Patch series mm/pagealloc: fixes for freepagesnolock on RT/UP. Pre-existing bugs found by Sashiko during review of...

Linux Distros Unpatched Vulnerability : CVE-2026-89963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/kexecfile: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in...

SUSE SLED15: NetworkManager / NetworkManager-bluetooth / etc (SUSE-SU-2026:4148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4148-1 advisory. - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. -...

RHEL 10 : coreutils (RHSA-2026:67886)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67886 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and...

Linux Distros Unpatched Vulnerability : CVE-2026-89988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kprobes: Protect kprobeblacklist with RCU withinkprobeblacklist traverses kprobeblacklist without holding kprobemutex. When a module is unloaded,...

Linux Distros Unpatched Vulnerability : CVE-2026-89968

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: reject unsolicited H2CData PDUs nvmettcphandleh2cdatapdu accepts an H2CData PDU after only checking that its TTAG is a valid in-range command index...

Linux Distros Unpatched Vulnerability : CVE-2026-89892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this...