Linux Distros Unpatched Vulnerability : CVE-2026-74586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCON...

Linux Distros Unpatched Vulnerability : CVE-2026-74632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: fix hugezeropfn race Patch series mm/hugememory: fix hugezeropfn race, v2. There is a subtle race in the reference-counted hugezerofolio...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:3661-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3661-1 advisory. This update for helm rebuilds it against the current go security release. Tenable has extracted the preceding description block directly fro...

Fedora 45 : gum (2026-6e4f15e36b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6e4f15e36b advisory. Automatic update for gum-2.0.0-1.fc45. Changelog Fri Aug 21 2026 Carl George - 2.0.0-1 - Update to version 2.0.0 rhbz2495240 - Override bundled...

Linux Distros Unpatched Vulnerability : CVE-2026-74587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the...

Linux Distros Unpatched Vulnerability : CVE-2026-74706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnge: Fix NULL pointer dereference in aux device release If allocation of auxrdev fails during auxiliary device setup, the error path calls auxiliarydeviceunini...

Fedora 44 : chromium (2026-295354c8a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-295354c8a1 advisory. chromium security release 151.0.7922.169 CVE-2026-76034: Buffer overflow in WebGL CVE-2026-76036: Buffer overflow in Dawn CVE-2026-76033:...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:3668-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3668-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-74715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfuncs can point to a shared map value. bpfnfctlookup and...

Fedora 44 : AusweisApp2 (2026-2fff59246b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2fff59246b advisory. Update to the latest upstream release: https://github.com/Governikus/AusweisApp/releases/tag/2.5.5 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...

Fedora 46 : gum (2026-023898bef1)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-023898bef1 advisory. Automatic update for gum-2.0.0-1.fc46. Changelog Fri Aug 21 2026 Carl George - 2.0.0-1 - Update to version 2.0.0 rhbz2495240 - Override bundled...

Linux Distros Unpatched Vulnerability : CVE-2026-74609

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlock...

Fedora 44 : ceph (2026-7de7d03796)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7de7d03796 advisory. Ceph 20.2.4 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC...

Linux Distros Unpatched Vulnerability : CVE-2026-74717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the...

Linux Distros Unpatched Vulnerability : CVE-2026-74612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area,...

Linux Distros Unpatched Vulnerability : CVE-2026-74654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is clos...

Linux Distros Unpatched Vulnerability : CVE-2026-74666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock, but used to publish the tpack...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:3670-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3670-1 advisory. This update for containerd rebuilds it against the current go security release. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-68767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length...