Linux Distros Unpatched Vulnerability : CVE-2026-99172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: drop the mqueue mount with kernunmount on setup failure mqinitns creates the mqueue mount with fcmountlongterm, so its -mntns is MNTNSINTERNAL. When settin...

Linux Distros Unpatched Vulnerability : CVE-2026-117982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Rocky Linux 9 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (crlsa-2026_89748)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689748 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code CVE-2026-772...

Linux Distros Unpatched Vulnerability : CVE-2026-99146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/dmc: Add sanity check for DMC load address For DMC firmware header version 3, the firmware load address is stored in dmcinfo-startmmioaddr and later us...

Linux Distros Unpatched Vulnerability : CVE-2026-117894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbi...

Linux Distros Unpatched Vulnerability : CVE-2026-118002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-117956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-99208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Zero OA buffer at allocation ttmbotypekernel BOs are not guaranteed to be zeroed on allocation and may contain data from previously freed pages. Sinc...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146873 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not...

Oracle Linux 8 : libXtst (ELSA-2026-91294)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91294 advisory. 1.2.3-8 - CVE-2026-94286 libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser in RECORD reply parser Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-118011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118011 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-117996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

PT-2026-129117

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Medium...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from mv643xxethprobe connecting to the PHY prior to allocating dev-netdevops; this results in a null pointer dereference when CONFIGNETSHAPER is enabled, triggering a probe...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89860)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689860 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via intege...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

CVE-2026-99196: Linux: In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash…

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000probe calls au1000miiprobe, which connects the PHY, before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since...

Oracle Linux 8 : kernel (ELSA-2026-85773)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85773 advisory. - smb: client: reject a tree connect response whose byte count is too small CKI Backport Bot RHEL-271288 CVE-2026-89631 - netfilter: flowtable: hold...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It stems from improper validation of userq buffer objects in drm/amdgpu/userq; no separate list of evicted objects is traversed. As a result, buffer objects created and then evicted prior to their creation cannot re-enter the eviction...

Linux Distros Unpatched Vulnerability : CVE-2026-117950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...