openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22041-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22041-1 advisory. Changes in chromium: - Chromium 155 promoted to stable - 155.0.8059.39 boo1284354: CVE-2026-106382: Use after free in Chromecast CVE-2026-106197...

Linux Distros Unpatched Vulnerability : CVE-2026-98574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: stop Tx NAPI before disabling the queues bcmgenetnetifstop and the Wake-on-LA...

MiracleLinux 9 : kernel-5.14.0-687.49.1.el9_8 (AXSA:2026-2093:103)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2093:103 advisory. kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow CVE-2026-23172 kernel: xfrm: hold dev ref until after transportfinish...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21700)

In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc tc qdisc add dev lo...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21703)

netem: Update sch q.qlen before qdisctreereducebacklog qdisctreereducebacklog notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc before calling it. Otherwise it would miss the opportunity to call cops qlennotify, in the case of DRR,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53192)

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at sndtimeruserparams At releasing a timer object, e.g. when a userspace timer CONFIGSNDUTIMER gets closed and sndtimerfree is called, it tries to detach the timer instances and release the resources. However...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-39863)

"In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work The brcmfbtcoexdetach only shuts down the btcoex timer, if the flag timeron is false. However, the brcmfbtcoextimerfunc, which runs as timer handler, sets...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791395988)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791395988 advisory. - Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from...

Linux Distros Unpatched Vulnerability : CVE-2026-98804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pagepool: fix use-after-free in pagepoolrecycleringbulk With CONFIGPAGEPOOLSTATS=y, pagepoolrecycleringbulk updates the recycle stats after dropping the...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21791)

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdevl3out l3mdevl3out can be called without RCU being held: rawsendmsg ippushpendingframes ipsendskb iplocalout iplocalout l3mdevipout Add rcureadlock / rcureadunlock pair to avoid a potential UAF. Th...

RockyLinux 9 : xorg-x11-server-Xwayland (RLSA-2026:85193)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:85193 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:4736-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4736-1 advisory. Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: - CVE-2026-109704: Privilege escalation in the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31580)

In the Linux kernel, the following vulnerability has been resolved: bcache: fix cacheddev.sbbio use-after-free and crash In our production environment, we have received multiple crash reports regarding libceph, which have caught our attention: 6888366.280350 Call Trace: 6888366.280452...

Oracle Linux 9 : dovecot (ELSA-2026-80825)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80825 advisory. - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character RHEL-251989 - fix CVE-2026-42007: use-after-free in pigeonhole...

RockyLinux 9 : xorg-x11-server (RLSA-2026:84574)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84574 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Fedora 43 : chromium (2026-5a871d2ca7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5a871d2ca7 advisory. Update to 155.0.8059.84, includes 10 security fixes CVE-2026-110913: Memory corruption in DOM CVE-2026-110914: Memory corruption in Workers...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2026-53264)

"In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action. Let's illustrate with CPU0 running NEWTFILTER an...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23336)

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkillblock work in wiphyunregister There is a use-after-free error in cfg80211shutdownallinterfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211shutdownallinterfaces+0x213/0x220 Read of size ...

Linux Distros Unpatched Vulnerability : CVE-2026-98788

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix private hash use-after-free on resize pollstatesynchronizercumm-futex.phash.batches is used by futexrefdrop to check that a grace period has passed...

PT-2026-118914

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description A use after free issue exists in WebAppInstalls, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. Use after...