Linux Distros Unpatched Vulnerability : CVE-2026-99147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/exec: don't immediately add prelocked obj to array of locked objs When a contention is detected the drmexec object grabs a reference to the contended object...

Linux Distros Unpatched Vulnerability : CVE-2026-99149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpuhmmrangealloc fails amdgpugemuserptrioctl returns -ENOMEM right away and skips the cleanup...

Linux Distros Unpatched Vulnerability : CVE-2026-99152

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that...

Linux Distros Unpatched Vulnerability : CVE-2026-99160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Do not show buffermeta for CPUs without a buffer The percpu/cpuN/buffermeta files are created for every possible CPU, but buffer-bufferscpu is only...

Linux Distros Unpatched Vulnerability : CVE-2026-99168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshvvtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshvvtlconfigureregpage warn...

Linux Distros Unpatched Vulnerability : CVE-2026-99169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix mm reuse handling for FUTOFFMMSHARED A FUTOFFMMSHARED futex is a shared futex that refers to an MM. It is possible for a process to wait on a shared...

Linux Distros Unpatched Vulnerability : CVE-2026-99172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: drop the mqueue mount with kernunmount on setup failure mqinitns creates the mqueue mount with fcmountlongterm, so its -mntns is MNTNSINTERNAL. When settin...

Linux Distros Unpatched Vulnerability : CVE-2026-99178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/kvm: Don't consume async PF flags on a kernel PF in NMI context An async PF page not present event arrives through the PF vector, and its reason sits in the...

Linux Distros Unpatched Vulnerability : CVE-2026-99182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture When chcount is smaller than blob-alhcfg.devicecount e.g. a mono capture stream, su...

Linux Distros Unpatched Vulnerability : CVE-2026-99201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both...

Linux Distros Unpatched Vulnerability : CVE-2026-99211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKFNETOFF and SKFLLOFF to read relative to an skb's network and MAC...

Fedora 44 : util-linux (2026-7f54b8305d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f54b8305d advisory. Upgrade to upstream release v2.41.6 for security-related changes. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : util-linux (2026-b7a077a212)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7a077a212 advisory. Upgrade to upstream release v2.41.6 with security-related patches. Tenable has extracted the preceding description block directly from the Fedora...

Oracle Linux 8 : thunderbird (ELSA-2026-90913)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90913 advisory. 140.17.0-1.0.1 - Add Oracle prefs file 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR Tenable has extracted the preceding...

Oracle Linux 8 : libXtst (ELSA-2026-91294)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91294 advisory. 1.2.3-8 - CVE-2026-94286 libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser in RECORD reply parser Tenable has extracted the...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from the fact that DRM/xe/oa fails to zero out OA buffer allocations; additionally, when allocating OA buffers via DRMXEOAPROPERTYOADISABLED, xeoainitoabuffer is not called. As a result, ttmbotypekernel buffers may contain dat...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from xebosetpurgeableshrinker in drm/xe, which unconditionally increments the shrinker page count whenever the purgeable state of a fixed buffer changes. This results in a count underflow; after the buffer is purged, the other...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.19. It stems from a naming conflict wherein the loop counter idx declared in foreachinsnprefix shares the same name as a local variable in getsegregoverrideidx, causing the variable to be shadowed. This prevents termination of loops under ...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from hip04macprobe calling ofPhyConnect before assigning it to ndev-netdevops. As a result, when CONFIGNETSHAPER is enabled, the probe process crashes due to a null pointer dereference...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises because rocketprobe saves the return value of rocketdeviceinit before checking for an error pointer; if initialization fails, rdev is not cleared. Subsequent probes then skip initialization and dereference the erroneous...