MiracleLinux 8 : firefox-140.17.0-1.el8_10.ML.1 (AXSA:2026-2063:28)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2063:28 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird:...

Linux Distros Unpatched Vulnerability : CVE-2026-110915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Oracle Linux 10 : kernel (ELSA-2026-83207)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83207 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271473 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131722)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131722 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: avoid authenable sysctl UAF during netns teardown procsctpdoauth updates the SCTP control...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131757 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64mmcontextput without holding ...

MiracleLinux 9 : thunderbird-140.17.0-1.el9_8.ML.1 (AXSA:2026-2064:24)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2064:24 advisory. firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts...

RockyLinux 10 : kernel (RLSA-2026:83207)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83207 advisory. kernel: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation CVE-2026-45859 kernel: net/sched: actct: Only release RCU read lock...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

RockyLinux 8 : kernel (RLSA-2026:83157)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83157 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in...

RockyLinux 8 : kernel-rt (RLSA-2026:83159)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83159 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in...

RHEL 10 : kernel (RHSA-2026:83707)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83707 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: MGMT: validate LT...

Linux sound/soc/fsl/fsl_audmix.c Component Use-After-Free

The vulnerabilities of the functions fslaudmixputmixclksrc and fslaudmixputoutsrc in the sound/soc/fsl/fslaudmix.c component of the Linux operating system are related to insufficient control of resources with dynamic management. Exploiting these vulnerabilities could allow attackers to compromise...

Linux net/handshake/genl.c Kernel Module Use-After-Free

The vulnerability of the handshakenldonedoit function in the Linux kernel’s handshake/genl.c file is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel Function Use-After-Free

The vulnerability of the managdcreatemanawqcq function in the drivers/net/ethernet/microsoft/mana/gdmamain.c file of the Linux kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-116176

A flaw was found in libarchive. An attacker can cause a Denial of Service DoS or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive entry copy mac metadata function...

PT-2026-115850

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a...

X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

UBUNTU-CVE-2026-110927

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection...

Red Hat: CVE-2026-110753: perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131731 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...