Linux Distros Unpatched Vulnerability : CVE-2026-98110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as a NUL-terminated string even though the TLV length is its only boundary. If th...

SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:1130-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1130-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-98103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igmp: convert struct ipsflist to RCU Commit 23d2b94043ca igmp: Add ipmclist lock in ipcheckmcrcu added spinlockbh&im-lock to ipcheckmcrcu to prevent a...

Linux Distros Unpatched Vulnerability : CVE-2026-98122

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the...

Linux Distros Unpatched Vulnerability : CVE-2026-97576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read numtilecolumnsminus1 + 1 entries from columnwidthminus1 and numtilerowsminus1 + 1...

Linux Distros Unpatched Vulnerability : CVE-2026-93210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint...

Linux Distros Unpatched Vulnerability : CVE-2026-93206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN,...

Linux Distros Unpatched Vulnerability : CVE-2026-97545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwr...

Linux Distros Unpatched Vulnerability : CVE-2026-97581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized...

Linux Distros Unpatched Vulnerability : CVE-2026-98064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NULL-ptr-deref when showing a void BTF type btfmodifiershow resolves the modifier and then calls btftypeopst-show unconditionally. For the void type...

Linux Distros Unpatched Vulnerability : CVE-2026-97600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: cc2520: fix FIFOP work use-after-free The FIFOP interrupt handler queues cc2520fifopirqwork. On removal, cc2520remove only flushes the work. The...

Linux Distros Unpatched Vulnerability : CVE-2026-98009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: ets: clamp quantum in parse and fallback paths etsqdiscchange falls back to pschedmtu with no floor for bands without an explicit quantum. With a...

RockyLinux 10 : cockpit-image-builder (RLSA-2026:71543)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:71543 advisory. fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75899 fast-uri: fast-uri: Server-side request forgery v...

Linux Distros Unpatched Vulnerability : CVE-2026-98021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen,...

Linux Distros Unpatched Vulnerability : CVE-2026-97608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nflog: unregister loggers before per-net teardown nflogsyslog and nfnetlinklog unregister their per-network namespace operations before unregistering...

Linux Distros Unpatched Vulnerability : CVE-2026-97976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintelpcie: validate packetlen before skbputdata btintelpciesubmitrxwork reads packetlen from rfhhdr without checking if it exceeds the RX buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-57176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend userid as the...

Linux Distros Unpatched Vulnerability : CVE-2026-98054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation...

Linux Distros Unpatched Vulnerability : CVE-2026-98030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks the whole cfp.unique bitmap into rulelocs without consulting...

Linux Distros Unpatched Vulnerability : CVE-2026-97544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't leak dqacct if rhashtable insertion fails LOLLM observes that xqcheckmodliveinodqtrx doesn't free the newly allocated dqa object if rhashtable...

Linux Distros Unpatched Vulnerability : CVE-2026-97611

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old =...

Oracle Linux 10 : libxml2 (ELSA-2026-71586)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71586 advisory. - Fix CVE-2026-86144 RHEL-256302 - Fix CVE-2026-86140 RHEL-256024 - Fix CVE-2026-74860 RHEL-255957 - Fix CVE-2026-86142 RHEL-256368 - Fix...

Fedora 44 : 389-ds-base (2026-b16c9cbc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b16c9cbc0f advisory. - Resolves: rhbz2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-97988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different...

openSUSE 16: httpcomponents-client / httpcomponents-client-cache / etc (openSUSE-SU-2026:21894-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21894-1 advisory. This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager...

RockyLinux 9 : thunderbird (RLSA-2026:70642)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70642 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8818-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8818-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made...

Linux Distros Unpatched Vulnerability : CVE-2026-97938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reboot: fix cadpid use-after-free race cadpid is a single kernel-wide struct pid pointer. procdocadpid reads it and passes it to pidvnr without protecting the...

Linux Distros Unpatched Vulnerability : CVE-2026-67421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP...

Linux Distros Unpatched Vulnerability : CVE-2026-97910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: sprd: validate compress buffer sizes against fixed allocations sprdplatformcompropen allocates the stage 0 IRAM buffer 32K data area and the stage 1 DDR...

Linux Distros Unpatched Vulnerability : CVE-2026-97907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 When keyid from chip is zero, rtlbtparsefirmwarev2 intentionally ignores all security...

SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:4339-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4339-1 advisory. - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. -...

Linux Distros Unpatched Vulnerability : CVE-2026-98104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full,...

Linux Distros Unpatched Vulnerability : CVE-2026-93235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad ---...

Linux Distros Unpatched Vulnerability : CVE-2026-97920

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return...

Linux Distros Unpatched Vulnerability : CVE-2026-97924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/userevents: Don't destroy fields when event removal fails destroyuserevent destroys the event's fields before attempting to remove the trace event call...

Linux Distros Unpatched Vulnerability : CVE-2026-98052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmasp: clear txcb-last before writing each descriptor bcmaspxmit only wrote txcb-last = true for the final fragment of an SKB; non-final fragments left th...

Linux Distros Unpatched Vulnerability : CVE-2026-97552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: initialise error in xfsdeferfinishone xfsdeferfinishone declares error without an initialiser and only assigns it inside the loop over dfp-dfpwork. When th...

Linux Distros Unpatched Vulnerability : CVE-2026-98088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information f...

Linux Distros Unpatched Vulnerability : CVE-2026-98091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: detach failed sprout device from transaction update list When creating the first metadata chunk for a sprout filesystem, createchunk adds the new device ...

Linux Distros Unpatched Vulnerability : CVE-2026-98108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: fix chan mode for LECONNREQ + EXTFLOWCTL pchan l2capnewconnection sets default value of channel mode to match the parent channel...

Linux Distros Unpatched Vulnerability : CVE-2026-97904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: initialize policy rwsem before sysfs publication cpufreqpolicyalloc initializes policy-rwsem after kobjectinitandadd has created the policy sysfs...

Linux Distros Unpatched Vulnerability : CVE-2026-98029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: nfp: bound the ntuple rule dump by the caller's buffer size nfpnetgetfsloc dumps every entry of nn-fs.list into rulelocs without consulting cmd-rulecnt,...

Linux Distros Unpatched Vulnerability : CVE-2026-98023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overl...

Linux Distros Unpatched Vulnerability : CVE-2026-93211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: initialize DRC hash table before registering shrinker shrinkerregister precedes the INITLISTHEAD loop and the drchashsize store. On weakly-ordered...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:4346-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4346-1 advisory. This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2026:1126-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1126-1 advisory. Update to Firefox 140.9.0 ESR MFSA 2026-22, bsc1260083: - CVE-2026-4684: Race condition,...

Linux Distros Unpatched Vulnerability : CVE-2026-97903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exit: hold a reference to threadpid across procflushpid Commit 0a36bad01731 releasetask: kill the no longer needed get/putpidthreadpid removed the reference...

Linux Distros Unpatched Vulnerability : CVE-2026-98137

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: treat any nonzero dio zero-range return as an error ntfsdiozerorange returns either 0 or a negative errno from blkdevissuezeroout %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-98033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-typed argument registers with markregknownzero and then restore...