The vulnerability of the ams_event_to_channel() function in the Linux kernel’s drivers/iio/adc/xilinx-ams.c file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amseventtochannel function in the drivers/iio/adc/xilinx-ams.c file of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261012-73-0189

The vulnerability of the uverbscmd.c component in the Linux operating system is related to incorrect checking of the amount of data at the input stage. Exploiting this vulnerability can allow an attacker to cause a service failure...

Rocky Linux 9.2 [CIQ] Security Update: libcap / libcap-devel Multiple Vulnerabilities (ciqsa-2026_1627)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261627 advisory. This advisory aggregates security fixes for the libcap SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-2602, CVE-2023-2603. Tenable has extracted the...

The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_79113)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202679113 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via crafte...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc (crlba-2022_3917)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20223917 advisory. For detailed information on changes in this release, see the Rocky Linux 9.0 Release Notes linked from the References section. This advisory is provided by Ctrl IQ,...

Amazon Linux 2 : docker (ALASECS-2026-143)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-143 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the fin...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content whe...

Amazon Linux 2 : oci-add-hooks (ALASECS-2026-144)

The version of oci-add-hooks installed on the remote host is prior to 0-0.11.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-144 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside o...

Amazon Linux 2023 : docker (ALAS2023-2026-3205)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3205 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

Medium: oci-add-hooks

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

ROS-20261012-73-0255

The vulnerability of the mtk-svs.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3192 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 In the Linux kernel, the following vulnerability has been...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-121)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-121 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-123)

The version of oci-add-hooks installed on the remote host is prior to 0-0.11.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-123 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to location...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ciqsa-2026_1634)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261634 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 31 CVEs: CVE-2023-0217, CVE-2022-3786, CVE-2024-4741,...

Rocky Linux 9.2 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / NetworkManager-bluetooth / etc Multiple Vulnerabilities (ciqsa-2026_1616)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261616 advisory. This advisory aggregates security fixes for the NetworkManager SRPM in CIQ LTS 9.2. It addresses 10 CVEs: CVE-2018-15688, CVE-2020-10754, CVE-2009-0365,...

Amazon Linux 2023 : oci-add-hooks (ALAS2023-2026-3206)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3206 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...