Rocky Linux 9.2 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / NetworkManager-bluetooth / etc Multiple Vulnerabilities (ciqsa-2026_1616)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261616 advisory. This advisory aggregates security fixes for the NetworkManager SRPM in CIQ LTS 9.2. It addresses 10 CVEs: CVE-2018-15688, CVE-2020-10754, CVE-2009-0365,...

ROS-20261012-73-0219

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261012-73-0258

The vulnerability of the sca3000probe function in the sca3000.c component of the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc (crlba-2026_50158)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202650158 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Bug Fixes and Enhancements: modproxyhtml regression in...

Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1625)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261625 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 24 CVEs: CVE-2023-25690, CVE-2023-31122, CVE-2022-28615,...

Rocky Linux 8.6 [CIQ] Security Update: go-toolset (ciqsa-2026_1600)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261600 advisory. This advisory aggregates security fixes for the go-toolset SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-34558. Tenable has extracted the preceding descriptio...

EulerOS 2.0 SP11 : pam (EulerOS-SA-2026-4265)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...

Oracle Linux 10 : thunderbird (ELSA-2026-80674)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80674 advisory. 140.17.0-1.0.1 - Add Oracle prefs 140.17.0-1 - Update to 140.17.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc (CENTOS7:CLSA-2026:1791424578)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791424578 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to...

Rocky Linux 8.6 [CIQ] Security Update: libksba / libksba-devel (ciqsa-2026_1603)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261603 advisory. This advisory aggregates security fixes for the libksba SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3515. Tenable has extracted the preceding description...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791780738)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791780738 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse...

Rocky Linux 8.6 [CIQ] Security Update: mod_http2 Multiple Vulnerabilities (ciqsa-2026_1605)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261605 advisory. This advisory aggregates security fixes for the modhttp2 SRPM in CIQ LTS 8.6. It addresses 14 CVEs: CVE-2023-44487, CVE-2019-9516, CVE-2019-9511,...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791800936)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791800936 advisory. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedriverte...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791741836)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791741836 advisory. - In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In...

Amazon Linux 2 : libsoup (ALAS-2026-3970)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3970 advisory. OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to...

TencentOS Server 4: kernel (TSSA-2026:1158)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1158 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2026:1791791753)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791791753 advisory. - libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computi...

Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2026-3163)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3163 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

Rocky Linux 10.2 [CIQ] Security Update: libipa_hbac / libipa_hbac-debuginfo / libsss_autofs / etc (crlsa-2026_77534)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677534 advisory. sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation CVE-2026-87853 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_77500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677500 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send path...