RHEL 9 : libXfont2 (RHSA-2026:59312)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59312 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...

Fedora 44 : freeipa / samba (2026-903d904933)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-903d904933 advisory. Update to Samba 4.24.6 and rebuild of freeipa ---- This update contains no changes; it exists purely to keep the Fedora 44 freeipa package...

RHEL 9 : osbuild-composer (RHSA-2026:59562)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59562 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Debian dla-4755 : libvncclient1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4755 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected]...

The vulnerability of the amdgpupciSlotReset() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c source code of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allo...

The vulnerability of the `coretemp_device_add()` function in the `drivers/hwmon/coretemp.c` driver module for monitoring Linux kernel equipment allows a hacker to cause a service failure.

The vulnerability of the coretempdeviceadd function in the drivers/hwmon/coretemp.c driver for monitoring hardware in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the loongson gpio_init_irqchip() function in the drivers/gpio/gpio-loongson-64bit.c driver of the Linux operating system’s GPIO kernel module allows a attacker to cause a service failure.

The vulnerability of the loongsongpioinitirqchip function in the drivers/gpio/gpio-loongson-64bit.c file of the Linux kernel’s GPIO driver is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mesh_rx_csa_frame() function in the net/mac80211/mesh.c module of the mac80211 stack implementation in Linux’s kernel, which allows a hacker to cause a service failure.

The vulnerability of the meshrxcaFrame function in the net/mac80211/mesh.c module of the mac80211 stack in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the x86_pmu_enable() function in the arch/x86/events/core.c module, which supports Linux’s x86 kernel platform, allows a attacker to cause a service failure.

The vulnerability of the x86pmuenable function in the arch/x86/events/core.c module of the Linux operating system’s kernel support for x86 platforms is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the asus_report_fixup() function in the driver module/hid/hid-asus.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a maintenance failure.

The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c of the Linux kernel device subsystem interface module is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `vidtv_channel_pmt_match_sections()` function in the `drivers/media/test-drivers/vidtv/vidtv_channel.c` file, a driver for multimedia devices in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the vidtvchannelpmtmatchsections function in the drivers/media/test-drivers/vidtv/vidtvchannel.c file, a driver for multimedia devices in the Linux kernel, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

RockyLinux 8 : sqlite (RLSA-2026:58938)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58938 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:59097)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59097 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 Tenable has extracted the preceding description block directly...

The vulnerability of the fnnlosf_add_callback() function in the net/netfilter/nfnetlink_osf.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the fnnlosfaddcallback function in the net/netfilter/nfnetlinkosf.c module of the netfilter kernel of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of protected...

The vulnerabilities of the functions brcmf_ops_sdio_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c), brcmf_pcie_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c), and brcmf_usb_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c) in the Broadcom wireless adapter driver software for Linux operating systems, allowing a hacker to cause system failures.

The vulnerabilities of the functions brcmfopssdioprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c, brcmfpcieprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c, and brcmfusbprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c in Broadcom wireless adapter drivers i...

The vulnerability of the rds_ib_get_mr() function in the net/rds/ib_rdma.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the rdsibgetmr function in the net/rds/ibrdma.c module, which implements kernel networking functions in the Linux operating system, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 9 : libXfont2 (RHSA-2026:59311)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59311 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:59152)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59152 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

TencentOS Server 4: glibc (TSSA-2026:0850)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

The vulnerability of the libie_fwlog_deinit() function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the libiefwlogdeinit function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...