PT-2026-64640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Reading the debugfs count file of a memcg-aware shrinker can cause the system to sleep inside an RCU read-side critical section. This occurs because the shrinker debugfs count show...

PT-2026-64756

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.18 Description An issue exists in the xfrm module where the xfrm policy fini function incorrectly calls synchronize rcu within the .exit handler of xfrm net ops. This violates the guidelines in include/net/net namespace....

Linux Distros Unpatched Vulnerability : CVE-2026-64250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21433-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21433-1 advisory. Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 bsc1266602 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-56624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH use...

openSUSE 16 Security Update : perl-XML-Bare (openSUSE-SU-2026:21435-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21435-1 advisory. Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded...

perl-XML-Bare-0.53-7.1 on GA media (moderate)

perl-XML-Bare-0.53-7.1 on GA media Announcement ID: openSUSE-SU-2026:11351-1 Rating: moderate Cross-References: CVE-2026-13401 CVE-2026-57074 CVSS scores: CVE-2026-13401 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-57074 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L...

amazon-ecs-init-1.105.0-2.1 on GA media (moderate)

amazon-ecs-init-1.105.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11345-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...

PT-2026-64734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 implementation where the TPR THRESHOLD field in the VMCS is not correctly updated during certain PPR updates. When apic update ppr is called and no...

PT-2026-64573

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.0 Description An issue exists in the Linux kernel where sleepable BPF programs cannot properly access Longest Prefix Match LPM maps. The function trie lookup elem uses an annotation that only validates classi...

KLA91172 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Input can be exploited remotely to execute...

PT-2026-64592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs component where the ptrace may access function is called without the necessary exec update lock protection. This lack of locking occurs within the following...

Linux Distros Unpatched Vulnerability : CVE-2026-64248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in...

openSUSE 16 Security Update : nm-configurator (openSUSE-SU-2026:21428-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21428-1 advisory. This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in...

Fedora 44 : skopeo (2026-9b2e56edf5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b2e56edf5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.26.5 which includes the fix. Tenable has extracted the precedi...

Fedora 44 : dotnet10.0 (2026-f738966fc9)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f738966fc9 advisory. Update to .NET SDK 10.0.110 and Runtime 10.0.10 Fixes:...

openSUSE 16 Security Update : google-cloud-sap-agent (openSUSE-SU-2026:21413-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21413-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...

Linux Distros Unpatched Vulnerability : CVE-2026-64419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/shrinker: do not hold RCU lock in shrinkerdebugfscountshow Reading the debugfs count file of a memcg-aware shrinker can sleep inside an RCU read-side critica...

PT-2026-64632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, the update counters and compat update counters functions forward a user-supplied 32-byte table name to find table lock without NUL-termination. When ...

Photon OS 5.0: Rubygem PHSA-2026-5.0-0929

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0929. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...