PT-2026-82195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev component where the fb set var function can delete a mode from the info-modelist when userspace provides FB ACTIVATE INV MODE via FBIOPUT VSCREENINFO. While...

PT-2026-82118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the regmap sdw mbq poll busy function where the system attempts to call the readable reg callback without verifying if it is set. Because this callback is optional,...

httpd security update

2.4.63-13.0.1.el102.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.6 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 2.4.63-13.5 - Resolves:...

Linux Distros Unpatched Vulnerability : CVE-2026-79771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can...

AlmaLinux 9 : gstreamer1-plugins-good (ALSA-2026:59152)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098996 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098961 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds in unpackpdb Start states are read from untrust...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python2 (UTSA-2026-093150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093150 advisory. Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb. Tenable has extracted the preceding...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098845)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098845 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using ethhdr ip6teui64, xtmac, the bitmap:ip,mac,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-104829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104829 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098704 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/riocm.c: prevent possible heap overwrite In riocmcdevioctlRIOCMCHANSEND -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104616 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104842 advisory. A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections...

Linux Distros Unpatched Vulnerability : CVE-2026-74741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061549 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily...

Fedora 44 : emacs (2026-60eff202e7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-60eff202e7 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

Debian dla-4757 : openjdk-17-dbg - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4757 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected]...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098727 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function in this...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098690 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, bu...

AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:59487)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59487 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 Tenable has extracted the preceding description block directly...