Linux Distros Unpatched Vulnerability : CVE-2026-90093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: access chan-conn safely in get/setsockopt Since commit b66774b48dd9 Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref...

Linux Distros Unpatched Vulnerability : CVE-2026-90239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: release partial allocations in isp4ifallocfwgpumem isp4ifallocfwgpumem...

Linux Distros Unpatched Vulnerability : CVE-2026-90262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: retry verity reads for not-uptodate Merkle folios btrfsreadmerkletreepage can find a folio in the mapping that is not uptodate. After taking the folio...

Linux Distros Unpatched Vulnerability : CVE-2026-90414

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/isert: reject PDUs declaring more data than was received isertrecvdone hands each received PDU to the opcode handlers without ever looking at wc-bytelen, th...

Linux Distros Unpatched Vulnerability : CVE-2026-93116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However,...

Linux Distros Unpatched Vulnerability : CVE-2026-90134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmaplocalpage usage in compress Several compressed I/O paths discard the address...

Linux Distros Unpatched Vulnerability : CVE-2026-90087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing ...

Oracle Linux 9 : perl-Net-DNS (ELSA-2026-68786)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68786 advisory. - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-93148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject MEMALLOC BTF accesses past object bounds BTF struct walks relax the struct-size check for accesses through a trailing flexible array. That is valid...

Linux Distros Unpatched Vulnerability : CVE-2026-90066

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/ftrace: Fix kthreadstop on ERRPTR in ftrace-direct-multi-modify ftracedirectmultiinit assigns kthreadrun's return value to simpletsk without an ISERR...

Linux Distros Unpatched Vulnerability : CVE-2026-90343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wirelessdev is still present in the driver...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109804 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Linux Distros Unpatched Vulnerability : CVE-2026-90281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables...

Linux Distros Unpatched Vulnerability : CVE-2026-90200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: fix integer overflow in MFT cluster validation In ntfsinitfromboot, the boot sector's MFT cluster numbers are validated against the volume size with: ...

Linux Distros Unpatched Vulnerability : CVE-2026-90079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: fix cn20k mailbox lifetime on repeated rvumboxinit rvumboxinit is called separately for AF-PF mailboxes during probe and for AF-VF mailboxes when...

Important: kernel-livepatch-6.12.103-127.188

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Important: kernel-livepatch-6.1.186-228.374

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages:...

Linux Distros Unpatched Vulnerability : CVE-2026-90232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amt: Don't support cross-netns setup. When a lower device is unregistered, amtdeviceevent tries to unregister its upper AMT device, but it has two problems. 1...

Linux Distros Unpatched Vulnerability : CVE-2026-90069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: acomp - allocate async request context when cloning ACOMPREQUESTONSTACK reserves only enough storage for the synchronous fallback. When an async...

Linux Distros Unpatched Vulnerability : CVE-2026-90105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: fix reading neigh ha Currently arp/neighreduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neighhasnapsh...