Linux Distros Unpatched Vulnerability : CVE-2026-81563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal...

Linux Distros Unpatched Vulnerability : CVE-2026-90021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fmidi: initialize work in fmidialloc fmidialloc initializes freeref to 1 and it can only be incremented when a sound card is registered via...

Linux Distros Unpatched Vulnerability : CVE-2026-89986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in...

Linux Distros Unpatched Vulnerability : CVE-2026-89873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long- term RPS counts that decoder drivers use to walk the...

Linux Distros Unpatched Vulnerability : CVE-2026-89814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: clamp the isolation index for rings outside a partition adev-isolation has one slot per partition, but a ring that is not assigned to one keeps...

Linux Distros Unpatched Vulnerability : CVE-2026-89831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: protect criticaltaskpriority updates with sumount The sysfs store path already takes sumount for GC thread control entries, and ckptthreadioprio is covere...

Linux Distros Unpatched Vulnerability : CVE-2026-89972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with...

Linux Distros Unpatched Vulnerability : CVE-2026-89903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and...

Linux Distros Unpatched Vulnerability : CVE-2026-89872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-fwnode: Fix fwnode leak in v4l2fwnodeparselink In v4l2fwnodeparselink, the remote endpoint fwnode reference is acquired using...

Linux Distros Unpatched Vulnerability : CVE-2026-89881

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rtl2832sdr: use vb2videounregisterdevice on remove to fix DMA leak rtl2832sdrremove runs on USB disconnect and clears dev-udev to NULL before any pendin...

Linux Distros Unpatched Vulnerability : CVE-2026-91089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. Impacted is the function gfnodegetnameandid of the file scenegraph/basescenegraph.c. The manipulation results ...

ROS-20260916-73-0006

The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

The vulnerability of the br_multicast_leave_group() function in the net/bridge/br_multicast.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the brmulticastleavegroup function in the net/bridge/brmulticast.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the ip_vs_bind_dest function in the ipvs component of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the ipvsbinddest function in the ipvs component of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-89860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Initialize NVMe abortwork once at submission qlanvmefcpabort and qlanvmelsabort ran INITWORK on priv-abortwork immediately before schedulework...

Oracle Linux 9 : tesseract (ELSA-2026-67831)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67831 advisory. 4.1.1-8 - Resolves: CVE-2026-73066 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Linux Distros Unpatched Vulnerability : CVE-2026-90004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet...

Linux Distros Unpatched Vulnerability : CVE-2026-90025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GETCURRENTCAM respons...

Linux Distros Unpatched Vulnerability : CVE-2026-89876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefin...

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...