PT-2026-106510

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An out-of-bounds write exists in the gud plane atomic check function. The issue occurs because the plane property loop incorrectly calculates the write index using req-propertiesnum...

PT-2026-106518

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An out-of-bounds write issue exists in the wilc wlan handle isr ext function. The function retrieves the RX transfer size from the device-reported interrupt status register and reads that...

PT-2026-106528

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the pmbus/core component of the hardware monitoring hwmon subsystem. The system previously limited the number of phases to 10, but certain drivers, such as mp2975 and...

PT-2026-106596

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the 9p filesystem implementation where the v9fs issue write function fails to correctly update i size and remote i size when a server file is enlarged. The fix ensures th...

PT-2026-106647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where absolute native symlink targets are not validated before NT fixups. When symlinkroot is unset, an absolute target is copied without conversion to ...

PT-2026-106652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the RDMA/siw component. The siw get hdr function may process an extended DDP/RDMAP header across multiple TCP callbacks. If the first callback receives...

PT-2026-106690

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the RDMA/rxe component where the rxe check pagefault function failed to properly verify access permissions, checking only for HMM PFN VALID instead of HMM PFN WRITE. This...

PT-2026-115836

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data ep set params allocates each data URB for exactly u-packets isochronous frames, so urb-iso frame desc has u-packets slots and ctx-packets is the driver's...

Linux Distros Unpatched Vulnerability : CVE-2026-98189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status regist...

Linux Distros Unpatched Vulnerability : CVE-2026-104036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but...

Linux Distros Unpatched Vulnerability : CVE-2026-98312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: 6fire: fix OOB write from device-reported iso length usb6firepcminurbhandler sizes each outgoing isochronous packet as actuallength - 4 / innanalog buffer...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_21557)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621557 advisory. kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA...

Linux Distros Unpatched Vulnerability : CVE-2026-98181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously...

Linux Distros Unpatched Vulnerability : CVE-2026-49878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code...

AlmaLinux 9 : gimp (ALSA-2026:75575)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75575 advisory. gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file CVE-2026-90947 gimp: gimp: heap-based buffer overflow in ICO loader vi...

AlmaLinux 8 : libpcap (ALSA-2026:76045)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

Cisco ASA Improper Input Validation (CVE-2020-3166)

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted...

macOS 27.x < 27.0 Multiple Vulnerabilities (149035)

The remote host is running a version of macOS / Mac OS X that is 27.x prior to the full release of 27.0. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process...

Oracle Linux 9 : vim (ELSA-2026-75768)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75768 advisory. - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref - RHEL-253669 CVE-2026-28420 vim: buffer overflow...

Fortinet FortiMail Path Traversal / NULL Byte Arbitrary File Write (FG-IR-26-175)

The version of FortiMail installed on the remote host is affected by a path traversal vulnerability as referenced in the FG-IR-26-175 advisory. - An improper limitation of a pathname to a restricted directory 'Path Traversal' combined with an improper neutralization of NULL byte or NULL character...