The vulnerability of the function ieee80211_parse_adv_t2l() in the module net/mac80211/mlme.c of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211parseadvt2l in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to compromise...

The vulnerability of the `prepare_playback_urb()` function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the prepareplaybackurb function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the x509_process_extension() function in the crypto/asymmetric_keys/x509_cert_parser.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the x509processextension function in the crypto/asymmetrickeys/x509certparser.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the smb2_unlink() function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smb2unlink function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the i915_fence_release() function in the Linux kernel’s drivers/gpu/drm/i915/i915_request.c module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the i915fencerelease function in the Linux kernel’s drivers/gpu/drm/i915/i915request.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the ctnetlink_exp_dump_expect() function in the net/netfilter/nf_conntrack_netlink.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ctnetlinkexpdumpexpect function in the net/netfilter/nfconntracknetlink.c module of the netfilter component of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

PT-2026-81518

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

Oracle Linux 7 : libreoffice (ELSA-2026-46386)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...

Oracle Linux 10 : nginx (ELSA-2026-59220)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59220 advisory. - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 ...

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-59179)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59179 advisory. - Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover Resolves: RHEL-246382 - Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decode...

Oracle Linux 10 : gstreamer1-plugins-base (ELSA-2026-59097)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59097 advisory. 1.26.7-2.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2026-58898)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-58898 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.14.0 -...

Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-59152)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59152 advisory. - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves:...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the decode_int() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

Vulnerability of functions __ext4_iget() (fs/ext4/inode.c) and swap_inode_boot_loader() (fs/ext4/ioctl.c) in the Ext4 file system of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ext4iget function fs/ext4/inode.c and the swapinodebootloader function fs/ext4/ioctl.c in the Ext4 file system of the Linux operating system is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a servi...

The vulnerability of the netfs_read_unlock_folios() function in the fs/netfs/read_collect.c module, which is part of the Linux kernel’s network file system support, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the netfsreadunlockfolios function in the fs/netfs/readcollect.c module, which is part of the Linux kernel’s network file system support, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel-based network device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the functions ip6tunnel_xmit() (from include.net/ip6_tunnel.h) and iptunnel_xmit() (from net.ipv4/ip_tunnel_core.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ip6tunnelxmit function included in net/ip6tunnel.h and the iptunnelxmit function in net/ipv4/iptunnelcore.c in the Linux kernel is related to unmanaged recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the u32_classify() function in the net/sched/cls_u32.c module of the network scheduling subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to...