UBUNTU-CVE-2026-98131

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmactsoxmit In stmmactsoxmit, if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before t...

CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

UBUNTU-CVE-2026-97957

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segment buffer overflow checkmboxseqidandseglen validates that seqid does not exceed SEQIDMAXVAL 42 and seglen does not exceed MBOXSEGLEN 48. However, this allows the last segment seqid=42 to carry a full...

Linux Distros Unpatched Vulnerability : CVE-2026-93233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/dmem: fix callocated underflow on large folio split nouveaudmemfoliofree drops chunk-callocated once per freed folio, while a large compound...

EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-087)

The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value can be predicted unde...

Linux Distros Unpatched Vulnerability : CVE-2026-98103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igmp: convert struct ipsflist to RCU Commit 23d2b94043ca igmp: Add ipmclist lock in ipcheckmcrcu added spinlockbh&im-lock to ipcheckmcrcu to prevent a...

UBUNTU-CVE-2026-97602

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

UBUNTU-CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

openSUSE 16 Security Update : keybase-client (openSUSE-SU-2026:21925-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21925-1 advisory. Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Tenable has extracted the...

UBUNTU-CVE-2026-97551

In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total == 0. xfsdagrowinodeint treats that field as a running block reservatio...

Linux Distros Unpatched Vulnerability : CVE-2026-98025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedule...

Linux Distros Unpatched Vulnerability : CVE-2026-97525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such ...

Linux Distros Unpatched Vulnerability : CVE-2026-97923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Free histogram the var ref when its initialization fails createvarref allocates a VARREF histfield and then calls initvarref to fill it in. When that...

Oracle Linux 9 : libxml2 (ELSA-2026-71585)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71585 advisory. - Fix CVE-2026-86144 RHEL-256304 - Fix CVE-2026-86140 RHEL-256027 - Fix CVE-2026-74860 RHEL-256120 - Fix CVE-2026-86142 RHEL-256365 - Fix CVE-2026-861...

Linux Distros Unpatched Vulnerability : CVE-2026-67222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied listtoatom/1 to every colon-delimited...

The vulnerability of the Vim text editor, related to the inclusion of functions from an unreliable and uncontrolled area, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-97988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different...

Linux Distros Unpatched Vulnerability : CVE-2026-97569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21911-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21911-1 advisory. - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decod...

Linux Distros Unpatched Vulnerability : CVE-2026-93257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: handle nogenerate/noverify properly in fs-integrity Check the BIPCHECK flags before generating or verifying PI information, otherwise this can be...