openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:21828-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21828-1 advisory. - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-89590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: Fix error path handling in rocketjobrun In rocketjobrun, after taking an extra fence reference for job-donefence via dmafenceget, the error paths...

Linux Distros Unpatched Vulnerability : CVE-2026-81002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied...

Linux Distros Unpatched Vulnerability : CVE-2026-89606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted...

Linux Distros Unpatched Vulnerability : CVE-2026-89556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS...

Linux Distros Unpatched Vulnerability : CVE-2026-89579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallba...

Linux Distros Unpatched Vulnerability : CVE-2026-18495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-82617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL -...

Linux Distros Unpatched Vulnerability : CVE-2026-12611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and t...

Linux Distros Unpatched Vulnerability : CVE-2026-89716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits valu...

Linux Distros Unpatched Vulnerability : CVE-2026-89519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Replace SCXRQBALKEEP with a dispatch verdict return SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and...

Linux Distros Unpatched Vulnerability : CVE-2026-89548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: always drain cachecleaner before destroying a cachedetail sunrpcdestroycachedetail only cancels the global cachecleaner delayedwork when cachelist is...

Linux Distros Unpatched Vulnerability : CVE-2026-89490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksiz...

Linux Distros Unpatched Vulnerability : CVE-2026-89772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: write-protect folios during data writeback commit 095be159f3eb btrfs: unify folio dirty flag clearing replaced the foliocleardirtyforio call in...

Linux Distros Unpatched Vulnerability : CVE-2026-89495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: bound namelen in dlmmigraterequesthandler Patch series ocfs2/dlm: bound peer-controlled lengths in the o2dlm. The o2dlm receive handlers trust u8 length...

Linux Distros Unpatched Vulnerability : CVE-2026-80983

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays...

Linux Distros Unpatched Vulnerability : CVE-2026-89513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENTGETINFO stores guest-controlled numevents sizeofeinfo in a 32-bit integer. On RV64, numevents =...

Linux Distros Unpatched Vulnerability : CVE-2026-89734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-80970

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: do not copy out an uninitialised init response fcpioctlinit allocates its response buffer with kmalloc and copies the whole buffer back to userspace...

Linux Distros Unpatched Vulnerability : CVE-2026-89765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec ...