PT-2026-90283

In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nr to scan. Busy buffers therefore do not consume the scan budget. If a...

Linux Distros Unpatched Vulnerability : CVE-2026-46352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - defrag: fragmented encapsulated traffic with fragments can lead to deadlock CVE-2026-46352 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-71616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gfroutemediacompleteobject. Fixed in...

Linux Distros Unpatched Vulnerability : CVE-2026-57224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - dhcp: unbounded tx growth with unidirectional traffic CVE-2026-57224 Note that Nessus relies on the presence of th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107264 advisory. In the Linux kernel, the following vulnerability has been resolved: md: Don't register syncthread for reshape directly Currently, if reshape is interrupted, then...

Linux Distros Unpatched Vulnerability : CVE-2026-84939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker...

RockyLinux 9 : nginx (RLSA-2026:66542)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66542 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...

PT-2026-90376

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4 client; a stateid reference does not pin it. The client survives only because destroy client drains its stateids...

PT-2026-90387

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp-mask nfsd3 proc setacl calls set posix acl unconditionally for both ACL TYPE ACCESS and ACL TYPE DEFAULT, passing argp-acl access and argp-acl default verbatim. The NFSv3 ACL decoder only populates...

PT-2026-90366

In the Linux kernel, the following vulnerability has been resolved: ceph: bound num export targets array for mds info v2/v3 ceph mdsmap decode in fs/ceph/mdsmap.c reads num export targets from each per-mds info record and advances the decode cursor by num export targets sizeofu32 without first...

PT-2026-90349

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce t2 coalesce t2 computes data pointers directly from server-supplied DataOffset fields with no validation against buffer bounds: data area of tgt = char...

PT-2026-90378

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroy client releases a client's open owners, but a lock owner whose only reference is a blocked lock nbl stays on cl ownerstr hashtbl. client has state does not...

PT-2026-90355

In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs invalidate cache in cifs do truncate for O TRUNC cifs do truncate is invoked from cifs open without i rwsem, so it cannot use cifs resize file locked to perform a proper fscache cookie resize. Instead, add cifs...

PT-2026-90353

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs check trans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-resp buf set, mid-multiRsp true and a subsequent secondary response causes cifs...

PT-2026-90344

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: clamp eeprom debugfs read to bytes actually received picolcd debug eeprom read trusts resp-raw data2 -- a length byte supplied by the device in its REPORT EE DATA reply -- clamped only to the caller's read count: re...

PT-2026-90294

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM IO BIO requests, do region built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

PT-2026-90321

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs send message locked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs send miscdev fails, t...

PT-2026-90295

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom map alloc has two 32-bit-specific problems when the computed bitmap reaches the U32 MAX fallback case. First, BITS TO BYTESU32 MAX is evaluated with 32-bit...

PT-2026-90317

In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS SYNC inodes ext2 setsize and ext2 xattr set2 had a construct like: if IS SYNCinode sync inode metadatainode, 1; else mark inode dirtyinode; which leads to lost inode updates for IS SYNC inodes...

PT-2026-90320

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...