Linux Distros Unpatched Vulnerability : CVE-2026-98548

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA...

Siemens SIMATIC S7-1500 TM MFP Improper Validation of Consistency within Input (CVE-2026-31488)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 'drm/amd/display: Add dsc pre-validation in atomic check', amdgpu resets the CRTC state modechanged flag to false when...

Siemens SIMATIC S7-1500 TM MFP Signal Handler Race Condition (CVE-2026-23372)

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

Linux Distros Unpatched Vulnerability : CVE-2026-98625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: publish HWDEAD after worker is done flowoffloadworkdel sets NFFLOWHWDEAD before the work handler clears NFFLOWHWPENDING. Once a flow is bo...

MiracleLinux 8 : kernel-4.18.0-553.174.1.el8_10 (AXSA:2026-2094:104)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2094:104 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in...

RockyLinux 9 : webkit2gtk3 (RLSA-2026:84583)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84583 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2024-58013)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in...

Siemens SIMATIC S7-1500 TM MFP Expired Pointer Dereference (CVE-2026-46125)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46180)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between sendsig and kthreadstop calls, what results in the use-after-free issue. Fix this by increasing watchdog task referenc...

MiracleLinux 9 : webkit2gtk3-2.54.1-1.el9_8 (AXSA:2026-2100:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2100:10 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Goog...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2024-58083)

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvmgetvcpu Explicitly verify the target vCPU is fully online prior to clamping the index in kvmgetvcpu. If the index is 'bad', the nospec clamping will generate '0', i.e. KVM will...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53256)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcommconnectind rfcommgetsockbychannel scans rfcommsklist under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcommconnectind th...

Linux Distros Unpatched Vulnerability : CVE-2026-98524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rds: ib: Clear the sg list when mapping an MR fails rdsibmapfrmr stores the caller's scatterlist in the MR before DMA mapping and registration can fail. On...

Linux Distros Unpatched Vulnerability : CVE-2026-98559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix UAF on lgr list traversal in smcrporterr smcrporterr traverses smclgrlist.list without holding smclgrlist.lock, allowing a concurrent...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46047)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove In the remove callback, if a packet arrives after destroyworkqueue is called, but before sockrelease, the qrtrnsdataready callback will try to queue the work, causing...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31500)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintelhwerror with hcireqsynclock btintelhwerror issues two hcicmdsync calls HCIOPRESET and Intel exception-info retrieval without holding hcireqsynclock. This lets it race against hcidevdoclose -...

Alibaba Cloud Linux 3 : 0304: perl-YAML-Syck (ALINUX3-SA-2026:0304)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0304 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-13713: YAML::Syck versions before 1.47 for...

Oracle Linux 10 : kernel (ELSA-2026-77690)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77690 advisory. - udp: fix potential use-after-free in tunnel segmentation Antoine Tenart RHEL-268127 CVE-2026-74705 - nfsd: defer vfree of compound ops to fix...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791557610)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791557610 advisory. - FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52918)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize acceptq access btsockpoll walks the accept queue without synchronization, while child teardown can unlink the same socket and drop its last reference. The unsynchronized accept queue walk has existed since th...