Linux Distros Unpatched Vulnerability : CVE-2026-74588

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap- acked chunk onto another transport's transmitted list without...

Linux Distros Unpatched Vulnerability : CVE-2026-74726

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: alb: re-check primaryispromisc under RTNL in bondalbmonitor bondalbmonitor reads primaryispromisc under RCU, then drops RCU and takes RTNL via...

Linux Distros Unpatched Vulnerability : CVE-2026-74614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b vsock/virtio: add support for device suspend/resume made the run flags transition from fals...

Linux Distros Unpatched Vulnerability : CVE-2026-74719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler store...

Linux Distros Unpatched Vulnerability : CVE-2026-74594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking...

Linux Distros Unpatched Vulnerability : CVE-2026-74684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 net: tap: NULL pointer derefence in devparseheaderprotocol when...

Linux Distros Unpatched Vulnerability : CVE-2026-74610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does no...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3678-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3678-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2026:3674-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3674-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes...

MiracleLinux 9 : fence-agents-4.10.0-110.el9_8.6 (AXSA:2026-1614:16)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1614:16 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...

Fedora 43 : pack (2026-70dd9b4fc0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-70dd9b4fc0 advisory. Update to 0.40.9 - fixes CVE-2026-41178 DoS via oversized OpenTelemetry baggage headers Tenable has extracted the preceding description block directly from t...

Linux Distros Unpatched Vulnerability : CVE-2026-74709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can...

SUSE SLES15 Security Update : podman (SUSE-SU-2026:3671-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3671-1 advisory. This update for podman rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

Fedora 44 : pack (2026-14ebd38fea)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-14ebd38fea advisory. Update to 0.40.9 - fixes CVE-2026-41178 DoS via oversized OpenTelemetry baggage headers Tenable has extracted the preceding description block directly from t...

Linux Distros Unpatched Vulnerability : CVE-2026-74728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput pat...

Linux Distros Unpatched Vulnerability : CVE-2026-74675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which...

PT-2026-79615

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk msg ring unpushed When the copy path in tls sw sendmsg locked adds the fragment that fills the plaintext sk msg ring, it does not set full record, so the record is left full and unpushed. A...

PT-2026-79590

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw-ports tb drom parse entry port validates the device-supplied header-index against sw-config.max port number before indexing sw-ports, but the sibling field...

PT-2026-79617

In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdp buff. If an XDP program adjusts the fragment area, veth xdp rcv skb copies xdp frags size back to skb-data len but...

PT-2026-79683

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179 178a: fix skb leak in ax88179 tx fixup When the interface has NETIF F SG enabled and skb linearize fails in ax88179 tx fixup, the function returns NULL without freeing the skb. usbnet start xmit treats a NULL...