EulerOS Virtualization 2.11.0 : aide (EulerOS-SA-2026-3485)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-90148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4: Fix incorrect argument passed to nfs4deletelease in nfs4addlease When nfs4addlease races with a delegation return, it calls nfs4deletelease to clean up...

Linux Distros Unpatched Vulnerability : CVE-2026-93175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the...

Linux Distros Unpatched Vulnerability : CVE-2026-90166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/server: fix null-ptr-deref in ksmbdipctreeconnectrequest See the procedure below: ksmbdtreeconnconnect ksmbdshareconfigget share-name = kstrdup // fail if...

Linux Distros Unpatched Vulnerability : CVE-2026-90297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sun4i: crtc: Propagate layer initialization error sun4icrtcinit returns plain NULL when layer initialization fails, while all its other error paths return a...

EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2026-3694)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that...

Linux Distros Unpatched Vulnerability : CVE-2026-90172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdmaacceptfailed error...

Linux Distros Unpatched Vulnerability : CVE-2026-93312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes...

Linux Distros Unpatched Vulnerability : CVE-2026-92490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Unrequest devices if driver registration fails scmidriverregister requests protocol devices before registering the driver. If driverregister...

Linux Distros Unpatched Vulnerability : CVE-2026-93054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup st...

Linux Distros Unpatched Vulnerability : CVE-2026-90271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error...

Linux Distros Unpatched Vulnerability : CVE-2026-90202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers basereleasememorypools unconditionally frees every ioc-pciesglookup entry, including ones the setup lo...

Linux Distros Unpatched Vulnerability : CVE-2026-93078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/features: Reject Set Features output buffer smaller than the header cxlctlsetfeature sizes its output buffer from the user's fwctlrpc.outlen but never check...

Linux Distros Unpatched Vulnerability : CVE-2026-90405

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe There are a few issues here: 1...

Fortinet FortiProxy 7.2.x / 7.4.x / 7.6.x < 7.6.7 NULL Pointer Dereference in httpsd (FG-IR-26-173)

The version of FortiProxy installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 in Fortinet FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions,...

EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2026-3741)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that...

Linux Distros Unpatched Vulnerability : CVE-2026-90207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize input teardown with eventinput sndmidiinputevent must not be running while a rawmidi substream is closing, since this can lead to the...

Linux Distros Unpatched Vulnerability : CVE-2026-93124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver ca...

Linux Distros Unpatched Vulnerability : CVE-2026-90115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109802 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...