365954 matches found
Debian dla-4795 : libcrypto3-udeb - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4795 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4795-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-97540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usbdeviceid parameter of prob...
Linux Distros Unpatched Vulnerability : CVE-2026-97952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunvdc: unmap LDC cookies when the descriptor send fails sendrequest maps the request's pages into the LDC channel's map table ldcmapsg, fills in the descriptor...
SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:1118-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1118-1 advisory. - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904. Tenable has...
Linux Distros Unpatched Vulnerability : CVE-2026-98117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: Fix potential UAF/KASAN warning Currently, tracecachefilescoherency is being passed a pointer to a be64 lain over the coherency data in struct...
Linux Distros Unpatched Vulnerability : CVE-2026-98134
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug...
Linux Distros Unpatched Vulnerability : CVE-2026-98069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL...
Linux Distros Unpatched Vulnerability : CVE-2026-97560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix one-byte OOB read in smb2parsenativesymlink When parsing a share-root relative native symlink, memcpy copies smbtarget+1 skipping the leading...
Linux Distros Unpatched Vulnerability : CVE-2026-97962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Move representor vnic reporter to eswitch devlink port The representor vnic devlink health reporter is created and destroyed along the representor...
Linux Distros Unpatched Vulnerability : CVE-2026-98016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix use-after-free race in samplerestoreput Concurrent teardown of TC sample rules sharing the same restore context may re-read restore-count after...
Linux Distros Unpatched Vulnerability : CVE-2026-88359
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal ...
Linux Distros Unpatched Vulnerability : CVE-2026-97575
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate AV1 tile counts The stateless AV1 decoders use tileinfo.tilecols and tilerows as loop bounds and as indices into the mistarts and...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Octavia vulnerabilities (USN-8814-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8814-1 advisory. It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticate...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Memcached vulnerability (USN-8792-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8792-1 advisory. It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause...
Linux Distros Unpatched Vulnerability : CVE-2026-100419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree...
Linux Distros Unpatched Vulnerability : CVE-2026-59980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input...
Linux Distros Unpatched Vulnerability : CVE-2026-100079
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: unregister debugfs entries on teardown ucsiregister creates per-instance debugfs entries, but ucsiunregister keeps them around until...
Linux Distros Unpatched Vulnerability : CVE-2026-97539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usbdeviceid parameter of probe liv...
Linux Distros Unpatched Vulnerability : CVE-2026-98092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: amd: yc: fix memory leak in acp6xpdmdmaclose acp6xpdmdmaclose does not free the runtime-privatedata buffer allocated in acp6xpdmdmaopen. Add the missing...
Oracle Linux 7 : yelp (ELSA-2026-57417)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57417 advisory. 2:3.28.1-1.0.1 - Backport fix for CVE-2026-13601 Orabug: 39908376 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Linux Distros Unpatched Vulnerability : CVE-2026-98153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix racy access to FDP placement id array nvmequeryfdpinfo is called per-path and therefore prone to races. It populates head-nrplids/head-plids for fdp...
Linux Distros Unpatched Vulnerability : CVE-2026-98143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 th...
Linux Distros Unpatched Vulnerability : CVE-2026-97994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost/vdpa: reject VRINGNUM larger than device max vhostvringsetnum accepts any non-zero power-of- two queue size that fits in 16 bits. vhost-vdpa then passes...
Linux Distros Unpatched Vulnerability : CVE-2026-98059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mark schedprocesswait argument as nullable dowait passes wo-wopid to the schedprocesswait tracepoint. kernelwait4 leaves wopid NULL for wait4-1, and...
Linux Distros Unpatched Vulnerability : CVE-2026-98024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: folioput after error dmb-cpuaddr was allocated via folioalloc. Use folioput instead of kfree in the error exit of ismallocdmb to avoid slab allocator...
Linux Distros Unpatched Vulnerability : CVE-2026-93227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mminit: deferredgrowzone: fix out-of-range firstdeferredpfn With CONFIGDEFERREDSTRUCTPAGEINIT enabled, deferredgrowzone initializes struct pages early in boo...
Oracle Linux 7 : abrt (ELSA-2026-48866)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48866 advisory. - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenable has extracted the preceding description block directly from the Oracl...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8790-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8790-1 advisory. It was discovered that Expat could be made to allocate large amounts of memory wh...
Linux Distros Unpatched Vulnerability : CVE-2026-97551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: initialise args-total for parent pointer updates xfsparentdaargsinit builds an xfsdaargs from a zeroed xfsparentargs kmemcachezalloc, leaving args-total ==...
Linux Distros Unpatched Vulnerability : CVE-2026-97933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element o...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8813-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8813-1 advisory. It was discovered that Expat did not correctly handle certain integer arithmetic...
Linux Distros Unpatched Vulnerability : CVE-2026-97968
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It run...
Linux Distros Unpatched Vulnerability : CVE-2026-97986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecveven...
Linux Distros Unpatched Vulnerability : CVE-2026-98087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A migratedisable'd RT task cannot be moved to another CPU, but the scheduler still keeps...
Linux Distros Unpatched Vulnerability : CVE-2026-97526
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run...
Linux Distros Unpatched Vulnerability : CVE-2026-67415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter valu...
FreeBSD : databases/p5-DBI -- multiple vulnerabilities (675bc714-b8cd-11f1-ad2b-40b034429ecf)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 675bc714-b8cd-11f1-ad2b-40b034429ecf advisory. DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: Tenabl...
Linux Distros Unpatched Vulnerability : CVE-2026-97902
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: don't return -EINVAL for successful nested thaw Commit 7366f8b6fc6a fs: handle freezing from multiple devices replaced the freezeholders bitmask with...
Linux Distros Unpatched Vulnerability : CVE-2026-97942
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/alternatives: Exclude text poking against changepageattr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kern...
SUSE SLES15: Multi-Linux-Manager-Server-SLE-release / mgradm / etc (SUSE-SU-2025:3839-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3839-1 advisory. Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-imag...
Linux Distros Unpatched Vulnerability : CVE-2026-88382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2026-97915
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is...
Linux Distros Unpatched Vulnerability : CVE-2026-97934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix memory corruption from a STACKTRACE histogram key cpu, CPU, stacktrace and STACKTRACE are generic fields, defined with an offset and a size of zero...
Linux Distros Unpatched Vulnerability : CVE-2026-93214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ftcm: fix deadlock in usbgmaketpg usbgmaketpg held deplock while calling configfsdependitemunlocked, which acquires the configfs root inode lock wh...
Linux Distros Unpatched Vulnerability : CVE-2026-97917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Validate full buffer range in ivputocpuaddr Add a size parameter to ivputocpuaddr and validate that the whole vpuaddr, vpuaddr + size range stays...
Linux Distros Unpatched Vulnerability : CVE-2026-93226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Base Plugins vulnerability (USN-8797-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8797-1 advisory. It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote...
Remote Desktop client for Windows Desktop (September 2026)
The Remote Desktop client for Windows Desktop installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code ove...
Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)
The version of Adobe Experience Manager Forms JEE installed on the remote host is 6.5.25 or earlier, or 6.5 LTS SP2 or earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-151 advisory. - Adobe Experience Manager Forms JEE is affected by an Incorrect...
Linux Distros Unpatched Vulnerability : CVE-2026-88372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files. CVE-2026-88372 Note that Nessus relies ...