Linux Distros Unpatched Vulnerability : CVE-2026-74494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP...

Linux Distros Unpatched Vulnerability : CVE-2026-72199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEXROOT values carry index...

Fedora 44 : pdns (2026-706965c440)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-706965c440 advisory. - Update to 5.0.7 Release notes: https://docs.powerdns.com/authoritative/changelog/5.0.htmlchange-5.0.7 Security Advisory:...

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2026:3614-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3614-1 advisory. Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. - CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIM...

Linux Distros Unpatched Vulnerability : CVE-2026-74503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: timer: Clear SNDRVTIMERIFLGDEAD once the close completes sndtimercloselocked marks an instance with SNDRVTIMERIFLGDEAD and returns early when the flag is...

Linux Distros Unpatched Vulnerability : CVE-2026-72019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12...

Linux Distros Unpatched Vulnerability : CVE-2026-72367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: guard iosize EOF trim against concurrent truncate underflow iomap: fix zero padding data issue in concurrent append writes changed ioend accounting so th...

Linux Distros Unpatched Vulnerability : CVE-2026-72200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can...

Linux Distros Unpatched Vulnerability : CVE-2026-72206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfsindexblockinconsisent to perform...

Linux Distros Unpatched Vulnerability : CVE-2026-74560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq...

Linux Distros Unpatched Vulnerability : CVE-2026-74484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the...

Linux Distros Unpatched Vulnerability : CVE-2026-19720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - inetutils - None Ubuntu Linux - Unknown description CVE-2026-19720 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2026-74248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an...

Linux Distros Unpatched Vulnerability : CVE-2026-74359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry it's pointing to becomes negative on eviction, realistically...

Linux Distros Unpatched Vulnerability : CVE-2026-72366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a...

Linux Distros Unpatched Vulnerability : CVE-2026-74440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xeexecioctl only added the VM's dma-resv KERNEL slot as a dependency. That slo...

Linux Distros Unpatched Vulnerability : CVE-2026-74295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: hdachdmi: Validate written enum value hdachdmisetpinportmux uses the written enum value to index the texts array before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-72225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: fix integer underflow in jbd2journalinitializefastcommit jbd2journalinitializefastcommit validates journal capacity by checking journal-jlast - numfcblks...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

Linux Distros Unpatched Vulnerability : CVE-2026-74345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoin...

Linux Distros Unpatched Vulnerability : CVE-2026-72243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure...

Linux Distros Unpatched Vulnerability : CVE-2026-74337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree...

RockyLinux 8 : .NET 10.0 (RLSA-2026:54542)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-74526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix potential deadlock in mpi3mrfaultueventemit mpi3mrfaultueventemit runs from the fault watchdog and reset paths where host I/O may already be...

Linux Distros Unpatched Vulnerability : CVE-2026-74375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: fix deadlock in read error recovery path raid1d and raid10d may resubmit a split md cloned bio while handling a read error. In this case,...

Linux Distros Unpatched Vulnerability : CVE-2026-72440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: fix writespending and barrier reference leaks on write failures raid1makerequest acquires a writespending reference with mdwritestart before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-72397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pmbus/core honor vrmversion in pmbusdata2regvid pmbusdata2regvid hardcoded the VR11 encoding regardless of the vrmversion configured by the driver, while...

Linux Distros Unpatched Vulnerability : CVE-2026-74368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix memory leak in ath12kwifi7dprxhverifytkipmic In ath12kwifi7dprxhverifytkipmic, the call to ath12kdprxchecknwifihdrlenvalid may return false wh...

Linux Distros Unpatched Vulnerability : CVE-2026-74448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process,...

Linux Distros Unpatched Vulnerability : CVE-2026-73194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse...

Linux Distros Unpatched Vulnerability : CVE-2026-72208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfsealookup and ntfslistxattr, this...

Linux Distros Unpatched Vulnerability : CVE-2026-74424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbcon: fix NULL pointer dereference for a console without vcdata fbconnewmodelist runs when a framebuffer's modelist changes. For each console mapped to it with...

Linux Distros Unpatched Vulnerability : CVE-2026-72236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/perfcpumcf: Add missing arrayindexnospec to hwperfeventinit ev variable is userspace controlled via event-attr.config and used as an array index after boun...

Linux Distros Unpatched Vulnerability : CVE-2026-74547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes...

Linux Distros Unpatched Vulnerability : CVE-2026-72031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD The PNY CS900 1TB SSD Phison PS3111-S11, DRAM- less drops off the bus after entering Device-Initiated...

Linux Distros Unpatched Vulnerability : CVE-2026-72329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/liquidio: drop cached VF pcidev LUT The PF SR-IOV enable path caches VF pcidev pointers in dpiringtovfpcidevlut by iterating with pcigetdevice. Those entrie...

Linux Distros Unpatched Vulnerability : CVE-2026-72147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and...

Linux Distros Unpatched Vulnerability : CVE-2026-72413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this...

Linux Distros Unpatched Vulnerability : CVE-2026-72253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: validate skbdst before accessing it tc ingress and openvswitch do not guarantee routing information to be available. These subsystems...

Linux Distros Unpatched Vulnerability : CVE-2026-74502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ump: fix double free of outcvts on rawmidi error sndumpattachlegacyrawmidi allocates the legacy conversion array ump-outcvts and, on the sndrawmidinew err...

Fedora 43 : pdns (2026-8aaf6f724b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8aaf6f724b advisory. - Update to 5.0.7 Release notes: https://docs.powerdns.com/authoritative/changelog/5.0.htmlchange-5.0.7 Security Advisory:...

GLSA-202608-12 : Portage: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-12 Portage: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Portage. Please review the bugs referenced below for details. The first bug bug 978478 allows a malicious ebuild including a build system...

Linux Distros Unpatched Vulnerability : CVE-2026-74374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: fix error-path detection with mdclonedbio Detect the error path using mdclonedbio instead of relying on r1bio in raid1 or r10bio-readslot in...

Linux Distros Unpatched Vulnerability : CVE-2026-74489

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix tidtx use-after- free on BA session stop ieee80211stoptxbacb hands tidt...

Linux Distros Unpatched Vulnerability : CVE-2026-74501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...

Linux Distros Unpatched Vulnerability : CVE-2026-72119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: extend bcmtxlock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc'd buffer and validate it there,...

Linux Distros Unpatched Vulnerability : CVE-2026-72144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad...

Linux Distros Unpatched Vulnerability : CVE-2026-74498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fillmax is set When a USB audio endpoint requests full packet transfers via the fillmax descriptor flag...

Linux Distros Unpatched Vulnerability : CVE-2026-72337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: avoid untracked enable work lowpanenableset allocates a temporary work item and schedules doenableset on systemwq, then returns to debugfs...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-54550)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54550 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235473 Tenable has extracted t...