ROS-20261012-73-0219

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_77500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677500 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send path...

Rocky Linux 8.6 [CIQ] Security Update: libksba / libksba-devel (ciqsa-2026_1603)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261603 advisory. This advisory aggregates security fixes for the libksba SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3515. Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc (CENTOS7:CLSA-2026:1791424578)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791424578 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to...

ROS-20261012-73-0093

The vulnerability of the mpireadrawfromsgl function in the lib/crypto/mpi/mpicoder.c module of the Linux kernel is related to a numerical overflow or cyclic shift. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 8.6 [CIQ] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-softokn / etc Multiple Vulnerabilities (ciqsa-2026_1606)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261606 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.6. It addresses 7 CVEs: CVE-2020-12403, CVE-2020-12400, CVE-2020-6829, CVE-2013-174...

Oracle Linux 10 : thunderbird (ELSA-2026-80674)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80674 advisory. 140.17.0-1.0.1 - Add Oracle prefs 140.17.0-1 - Update to 140.17.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2026-3163)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3163 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

EulerOS 2.0 SP11 : pam (EulerOS-SA-2026-4265)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...

Amazon Linux 2023 : docker (ALAS2023-2026-3205)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3205 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

Rocky Linux 9.2 [CIQ] Security Update: libcap / libcap-devel Multiple Vulnerabilities (ciqsa-2026_1627)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261627 advisory. This advisory aggregates security fixes for the libcap SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2023-2602, CVE-2023-2603. Tenable has extracted the...

Rocky Linux 9.6 [CIQ] Security Update: jasper / jasper-devel / jasper-libs / jasper-utils Multiple Vulnerabilities (ciqsa-2026_1632)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261632 advisory. This advisory aggregates security fixes for the jasper SRPM in CIQ LTS 9.6. It addresses 37 CVEs: CVE-2008-3522, CVE-2016-1577, CVE-2014-9029,...

Rocky Linux 8.6 [CIQ] Security Update: texlive / texlive-adjustbox / texlive-ae / texlive-algorithms / etc (ciqsa-2026_1610)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261610 advisory. This advisory aggregates security fixes for the texlive SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2018-17407. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content whe...

Rocky Linux 8.6 [CIQ] Security Update: mod_http2 Multiple Vulnerabilities (ciqsa-2026_1605)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261605 advisory. This advisory aggregates security fixes for the modhttp2 SRPM in CIQ LTS 8.6. It addresses 14 CVEs: CVE-2023-44487, CVE-2019-9516, CVE-2019-9511,...

ROS-20261012-73-0058

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261012-73-0232

The vulnerability of the fs/ntfs3 components in the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0223

The vulnerability of the getmanufinfo function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261012-73-0225

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

ROS-20261012-73-0106

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the Linux kernel’s general support for USB4 and Thunderbolt drivers is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the...