Linux Distros Unpatched Vulnerability : CVE-2026-74937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

Linux Distros Unpatched Vulnerability : CVE-2026-74962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...

Linux Distros Unpatched Vulnerability : CVE-2026-66046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where...

Linux Distros Unpatched Vulnerability : CVE-2026-74985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153....

Linux Distros Unpatched Vulnerability : CVE-2026-72371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix the volume AFSVOLUMERMTREE is set on Fix afsinsertvolumeintocell to set AFSVOLUMERMTREE on the volume replaced, not the new volume, as it's now removed...

Linux Distros Unpatched Vulnerability : CVE-2026-74416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller...

Linux Distros Unpatched Vulnerability : CVE-2026-70354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-70354 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-74311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore...

Linux Distros Unpatched Vulnerability : CVE-2026-72082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: elx: efct: Fix refcount leak in efcthwioabort When efcthwreqtagalloc fails in efcthwioabort, the error path returns -ENOSPC without releasing the referenc...

Linux Distros Unpatched Vulnerability : CVE-2026-74999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the Add to address book action was subject to stored XSS. CVE-2026-74999 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-72101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-integrity: fix leaking uninitialized kernel memory If hash size is less than device's tuple size, dm- integrity is supposed to zero the remaining space. Ther...

Linux Distros Unpatched Vulnerability : CVE-2026-74370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session...

Linux Distros Unpatched Vulnerability : CVE-2026-62871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-74428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix double unlock in rxrpcrecvmsg Fix a double unlock in rxrpcrecvmsg when dealing with OOB messages. CVE-2026-74428 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-72240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: sm501: Fix reference leak on failed device registration When platformdeviceregister fails in sm501registerdevice, the embedded struct device in pdev has...

Linux Distros Unpatched Vulnerability : CVE-2026-72169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since th...

Linux Distros Unpatched Vulnerability : CVE-2026-72471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: prevent potential lcn remains uninitialized The target VCN being sought was not found within runs0, causing runlookup to return false. This causes...

Linux Distros Unpatched Vulnerability : CVE-2026-62897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. CVE-2026-62897 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedu...

Linux Distros Unpatched Vulnerability : CVE-2026-72014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY from a peer into the bio of an outstanding read request. The...