CVE-2026-102371

The wsl-pro-service component (versions before 0.1.19ubuntu3 ) is vulnerable to information disclosure because it passes an Ubuntu Pro token as a command-line argument during the execution of the pro attach command. Since WSL defaults to mounting /proc without process-hiding mitigations like hide...

PT-2026-102618

Name of the Vulnerable Software and Affected Versions wsl-pro-service versions prior to 0.1.19ubuntu3 Description A service component running as root within a WSL instance attaches the instance to Ubuntu Pro by executing the pro client and passing the Ubuntu Pro token as a command-line argument. ...

CVE-2026-97903: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to threadpid across procflushpid Commit 0a36bad01731 "releasetask: kill the no longer needed get/putpidthreadpid" removed the reference around procflushpid. It assumed that freepidspost.pids at the end of...

PT-2026-98602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists involving the cad pid pointer, a kernel-wide structure. The functions proc do cad pid and kill cad pid read cad pid and pass it to pid vnr and kill...

PT-2026-98567

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.y Description A slab-use-after-free issue exists in the Linux kernel during the process exit sequence. The problem occurs when release task fails to hold a reference to thread pid across the proc flush pid...

PT-2026-97566

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.1 Description An authenticated AMQP 0-9-1 client can crash the Erlang VM, affecting all vhosts and connections, by sending approximately 1 million requests. The issue occurs when...

CVE-2026-94137

A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub180004AC0 of the file shdrvx64.sys of the component IRPMJDEVICECONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally...

CVE-2026-94137

Hangzhou Shunwang Technology shzh version 10.7.2.693 contains a denial-of-service vulnerability in the driver file shdrv_x64.sys , specifically in the function sub_180004AC0 within the IRP_MJ_DEVICE_CONTROL handler. The root cause is improper handling of the PID argument, which allows a local att...

EUVD-2026-83830

A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub180004AC0 of the file shdrvx64.sys of the component IRPMJDEVICECONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally...

MiracleLinux 8 : mrtg-2.17.7-1.el8_10.1 (AXSA:2026-1849:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1849:03 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: PID: Taking a reference when initializing cadpid During boot, kernelinitfreeable initializes cadpid to the struct pid of the init task. Later, we may change cadpid via sysctl. When this happens, procdocadpid will increment the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: Media: dvb-frontends/rtl2832 – Fixed an out-of-bounds write error. Ensured that the index in rtl2832pidfilter does not exceed 31 to prevent out-of-bounds access. dev-filters is a 32-bit value; therefore, the setbit an...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: A bug related to out-of-bounds write operations has been fixed. Ensure that the index in rtl2830pidfilter does not exceed 31 to prevent out-of-bounds access. dev-filters is a 32-bit value;...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm: /proc/pid/smapsrollup: fix no vma’s null-deref Commit 258f669e7e88 “mm: /proc/pid/smapsrollup: convert to single value seqfile“” introduced a null-deref if there are no vma’s in the task in showsmapsrollup...

CVE-2026-80929

A flaw was found in the Linux kernel. A non-root user can exploit a vulnerability in the sysctl mechanism, specifically related to the cadpid entry. By unsharing process ID PID and user namespaces, a local attacker can modify this global system control from a child namespace. This allows a user...

CVE-2026-89768 fs: fix user path of nested backing files

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

Fedora 45 : mrtg (2026-c2dba9f29d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c2dba9f29d advisory. Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling Tenable has extracted the preceding description block directly from...

PT-2026-90059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the sysctl implementation where the cad pid entry is incorrectly placed in the pid table instead of the kern reboot table. Because of the pid table root permissions...

PT-2026-96455

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing file open derives the path to be stored in the new backing file from user file-f path. This is incorrect when user file itself is a backing file, which is the case for nested...

Oracle Linux 8 : ELSA-2026-65832-0: / mrtg (ELSA-2026-658320)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-658320 advisory. 2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037 Tenable has extracted the preceding description block...