Linux Distros Unpatched Vulnerability : CVE-2026-89092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query,...

RockyLinux 9 : kernel (RLSA-2026:66180)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66180 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-4333...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107259 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain funcwakenotify before teardown The Broadcom BDC UDC...

Linux Distros Unpatched Vulnerability : CVE-2026-45766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certai...

Linux Distros Unpatched Vulnerability : CVE-2026-88032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107327 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq maxsge attribute maxsge attribute is passed by the user, and is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107272 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107297 advisory. In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO schedule...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107270 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev...

Linux Distros Unpatched Vulnerability : CVE-2026-88033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file...

Linux Distros Unpatched Vulnerability : CVE-2026-46352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Fedora 45 : tar (2026-ee1eb89e7b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee1eb89e7b advisory. Fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracted the preceding description...

Xen: Stale TLB Entry Ahead of Page Scrubbing (XSA-511)

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107293 advisory. In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3...

Linux Distros Unpatched Vulnerability : CVE-2026-57224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - dhcp: unbounded tx growth with unidirectional traffic CVE-2026-57224 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2026-88016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with...

Linux Distros Unpatched Vulnerability : CVE-2026-79514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTT...

Linux Distros Unpatched Vulnerability : CVE-2026-88264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107322 advisory. In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different...

AlmaLinux 9 : freerdp (ALSA-2026:66347)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66347 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directly fro...