Linux Distros Unpatched Vulnerability : CVE-2026-4694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9,...

Linux Distros Unpatched Vulnerability : CVE-2026-4700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Linux Distros Unpatched Vulnerability : CVE-2026-23321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: in-kernel: always mark signal+subflow endp as used Syzkaller managed to find a combination of actions that was generating this warning:...

Linux Distros Unpatched Vulnerability : CVE-2026-23335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid =...

Linux drivers/clocksource/hyperv_timer.c Heap Buffer Overflow DoS

The vulnerability of the hvinitclocksource function in the drivers/clocksource/hypervtimer.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-33202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's...

Linux Distros Unpatched Vulnerability : CVE-2026-23340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: avoid qdiscresetalltxgt vs dequeue race for lockless qdiscs When shrinking the number of real tx queues, netifsetrealnumtxqueues calls...

Linux Distros Unpatched Vulnerability : CVE-2026-33809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an...

Linux Distros Unpatched Vulnerability : CVE-2026-4709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-23385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: clone set on flush only Syzbot with fault injection triggered a failing memory allocation with GFPKERNEL which results in a WARN splat:...

Linux Distros Unpatched Vulnerability : CVE-2026-4690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34,...

Linux Distros Unpatched Vulnerability : CVE-2026-23324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: usb: etases58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before...

Linux Distros Unpatched Vulnerability : CVE-2026-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of Service via path traversal in D-Bus locale configuration fedora-all CVE-2026-3836 Note that Nessus relies on the presence of the package as reported b...

Linux Distros Unpatched Vulnerability : CVE-2026-21715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable...

Linux Distros Unpatched Vulnerability : CVE-2026-4677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafte...

Security Bulletin: NVIDIA Apex - March 2026

NVIDIA has released an update for NVIDIA® Apex to address a security issue. To protect your system, clone or update NVIDIA Apex to include commit db8e053 or later from NVIDIA Apex. Ensure that your environment uses PyTorch 2.6 or later from PyTorch. Go to NVIDIA Product Security. Details The...

Linux xchk_xfile_*_descr Heap Buffer Overflow DoS

The vulnerability of the xchkxfiledescr function in the Linux operating system is related to access to a buffer with an incorrect length value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/ipv4/xfrm4Protocol.c Heap Buffer Overflow DoS

The vulnerability of the xfrm4protocolinit function in the net/ipv4/xfrm4Protocol.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kasanreleasevmalloc function in the mm/kasan/shadow.c module of the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux xchk_scrub_create_subord Heap Buffer Overflow DoS

The vulnerability of the xchkscrubcreatesubord function in the Linux operating system is related to incorrect checking of the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure...