SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4192-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4192-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423:...

Linux Distros Unpatched Vulnerability : CVE-2026-89826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: harden firmware build-info bounds checks panthorfwreadbuildinfo checks whether the metadata range fits in the firmware image with hdr.metastart +...

Linux Distros Unpatched Vulnerability : CVE-2026-89874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2asyncmatchnotify creates ancillary media links before adding asc-ascsubdeventry to...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-67525)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67525 advisory. 8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 Tenable has extracted the...

SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4193-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4193-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...

Linux Distros Unpatched Vulnerability : CVE-2026-89899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: disable delayed work before freeing an interrupted transmit cectransmitmsgfh drops adap-lock to wait for a blocking transmit in...

Linux Distros Unpatched Vulnerability : CVE-2026-92039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-67530)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67530 advisory. 10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-89817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: NUL-terminate TV mode names read from the device gudconnectoraddtvmode reads a buffer of fixed-size mode names from the USB device and passes pointers...

Linux Distros Unpatched Vulnerability : CVE-2026-92073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153....

Linux Distros Unpatched Vulnerability : CVE-2026-89885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the S...

Oracle Linux 10 : rsyslog (ELSA-2026-67584)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67584 advisory. 8.2510.0-5.1 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-89793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ublk: clear VMMAYWRITE on read-only ublk char device mmap ublkchmmap rejects mmap requests with VMWRITE set, but never clears VMMAYWRITE on the resulting...

Oracle Linux 9 : .NET / 9.0 (ELSA-2026-67614)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67614 advisory. 9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 Tenable has extracted t...

Linux Distros Unpatched Vulnerability : CVE-2026-90019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fix null pointer dereference in usbputfunctioninstance usbputfunctioninstance attempts to dereference fd inside fi struct to get mod in uvcallocins...

Linux Distros Unpatched Vulnerability : CVE-2026-89995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-direct: return struct page from dmadirectallocfrompool Commit 5b138c534fda dma-direct: factor out a dmadirectallocfrompool helper changed...

Linux Distros Unpatched Vulnerability : CVE-2026-90049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: don't skbtxerror the source skb in skbzerocopy skbzerocopy copies frags from @from into @to. On an skborphanfrags failure it calls skbtxerror@from,...

Linux Distros Unpatched Vulnerability : CVE-2026-89840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: validate MOVERANGE destination size F2FSIOCMOVERANGE checks the source range, but not the destination end before updating isize. A source hole can expose...

Linux Distros Unpatched Vulnerability : CVE-2026-92048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-89894

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cx231xx: reject geometry changes while the VBI queue is busy vidiocsfmtvidcap and vidiocsstd change the device-wide dev-width / dev-norm but only refuse...