Debian dla-4864 : libswupdate-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4864 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4864-1 [email protected]...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146348)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146348 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link...

Linux Distros Unpatched Vulnerability : CVE-2026-98991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: queue a mount only once for mount notifications mntnotifyadd puts a mount on notifylist. It doesn't check whether the mount is on the list already...

AlmaLinux 8 : libreswan (ALSA-2026:90492)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90492 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Linux Distros Unpatched Vulnerability : CVE-2026-79981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised dnsresolveinitlocked -...

Linux Distros Unpatched Vulnerability : CVE-2026-116540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket...

Adobe Connect <= 4.4 Arbitrary Code Execution Vulnerability (APSB26-182)

The version of Adobe Connect installed on the remote host is prior to 4.5. It is, therefore, affected by a vulnerability as referenced in the apsb26-182 advisory. - Improper Control of Generation of Code 'Code Injection' CWE-94 potentially leading to Arbitrary code execution CVE-2026-48360 Note...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146313 advisory. In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of the socket by its timers The x25 timers are armed with modtimer an...

Oracle Linux 8 : python-urllib3 (ELSA-2026-90759)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90759 advisory. 1.24.2-11 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser memory allocation in chunk parser Resolve...

Linux Distros Unpatched Vulnerability : CVE-2026-99062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: account only unread bytes in readskb After a partial stream receive, rxbytes tracks the unread suffix while bufused and peer credit still cover th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146346 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146307 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-98949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next par...

Linux Distros Unpatched Vulnerability : CVE-2026-98887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211hwsim: reject undersized HWSIMATTRTXINFO hwsimtxinfoframereceivednl casts the HWSIMATTRTXINFO payload to a struct hwsimtxrate and unconditionally...

TencentOS Server 3: kernel (TSSA-2026:1225)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1225 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-99016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: futex: untag the user pointer before the atomic access accessok checks untaggedaddruaddr, but archfutexatomicopinuser and futexatomiccmpxchginatomic hand...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146260)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146260 advisory. In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function...

Linux Distros Unpatched Vulnerability : CVE-2026-98893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives t...

Linux Distros Unpatched Vulnerability : CVE-2026-98982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: don't let a pseudo dentry become the root of a mount dallocpseudo hands out dentries for pipes, sockets and other files that are never anyone's child...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

Linux Distros Unpatched Vulnerability : CVE-2026-99004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 drm/imagination: Fix page count for page table for map interface passed the...

Linux Distros Unpatched Vulnerability : CVE-2026-65627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory...

Linux Distros Unpatched Vulnerability : CVE-2026-79980

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier iface-config.dhcpv4.xid as a counter rather than as a per-transaction...

TencentOS Server 4: xdg-dbus-proxy (TSSA-2026:1181)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1181 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-115385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests ...

Linux Distros Unpatched Vulnerability : CVE-2026-98892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The...

SUSE SLED15 / SLES15 Security Update : runc (SUSE-SU-2026:4911-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4911-1 advisory. This update for runc rebuilds it against the current go security release. Tenable has extracted the preceding descripti...

Linux Distros Unpatched Vulnerability : CVE-2026-98925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with...

Linux Distros Unpatched Vulnerability : CVE-2026-109090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious X server could cause a heap overflow by injecting a large DEVICEENABLE reply when processed by libXi before 1.8.4. CVE-2026-109090 Note that Nessus...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146309)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146309 advisory. In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings a...

Linux Distros Unpatched Vulnerability : CVE-2026-115377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write...

Linux Distros Unpatched Vulnerability : CVE-2026-98988

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: keep covered mounts covered in OPENTREENAMESPACE opentreeOPENTREENAMESPACE creates a new mount namespace from a copy of the tree at the given path...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146323 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

Linux Distros Unpatched Vulnerability : CVE-2026-98976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved beneath attachrecursivem...

RockyLinux 8 : kernel (RLSA-2026:89816)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89816 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from...

TencentOS Server 4: sudo (TSSA-2026:1190)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1190 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

AlmaLinux 9 : bind9.18 (ALSA-2026:89746)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:89746 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the AlmaLin...

Linux Distros Unpatched Vulnerability : CVE-2026-116732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr...

Linux Distros Unpatched Vulnerability : CVE-2026-65629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recove...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146280)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146280 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the...

Linux Distros Unpatched Vulnerability : CVE-2026-98948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mlxsw: spectrumflower: Fix port range register leak in tmpltcreate mlxswspflowertmpltcreate parses a flowclsoffload template into a stack-local struct...

Linux Distros Unpatched Vulnerability : CVE-2026-116195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after...

RockyLinux 9 : flatpak (RLSA-2026:89850)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89850 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...

Veeam ONE < 13.1.0.7940 (kb4951)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4951 advisory. - A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it...

CentOS Linux 8 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793091465)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793091465 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the libra...

Linux Distros Unpatched Vulnerability : CVE-2026-98938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rust: irq: pass RegistrationInner as cookie to requestirq With commit ba268514ea14 rust: devres: fix race condition due to nesting, Devres::new returns Result b...

Linux Distros Unpatched Vulnerability : CVE-2026-99029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sparx5: free the matchall entry on destroy sparx5tcmatchallreplace allocates a struct sparx5mallentry for every offloaded matchall filter and adds it to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146300 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgenchangename replaces pktdev-entry while holding...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793092125)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793092125 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146299 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in...