Linux Distros Unpatched Vulnerability : CVE-2026-93220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Keep kicksync waiting on the rq's own CPU kicksyncwaitbalcb assumes it runs on the rq's CPU from the schedule tail: the snapshots it compares against...

Linux Distros Unpatched Vulnerability : CVE-2026-93266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to s.a1 makes FORTIF...

Linux Distros Unpatched Vulnerability : CVE-2026-98049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX |...

Linux Distros Unpatched Vulnerability : CVE-2026-97533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one...

Linux Distros Unpatched Vulnerability : CVE-2026-98101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and...

openSUSE 16: exiv2 / exiv2-lang / libexiv2-28 / libexiv2-28-x86-64-v3 / etc (openSUSE-SU-2026:21904-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21904-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : ClamAV vulnerabilities (USN-8788-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8788-1 advisory. It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to...

Linux Distros Unpatched Vulnerability : CVE-2026-98136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: bound $AttrDef table walk to the loaded table size ntfsattrfindinattrdef walks the in-memory $AttrDef table, but the loop condition bounds only the start ...

Linux Distros Unpatched Vulnerability : CVE-2026-97955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: restore the XDP program pointer when pre-allocation fails manaxdpset publishes the new program into apc-bpfprog before it allocates anything, because...

Linux Distros Unpatched Vulnerability : CVE-2026-93218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugeloc...

Linux Distros Unpatched Vulnerability : CVE-2026-97561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts with forceuid or forcegid uid=/gid= mount options, they expect a...

Linux Distros Unpatched Vulnerability : CVE-2026-93263

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initiali...

Linux Distros Unpatched Vulnerability : CVE-2026-93265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config register...

Linux Distros Unpatched Vulnerability : CVE-2026-93225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup...

openSUSE 16: gdk-pixbuf-loader-libheif / libheif-aom / libheif-dav1d / etc (openSUSE-SU-2026:21889-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21889-1 advisory. - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/auxl items bsc1279443. -...

Linux Distros Unpatched Vulnerability : CVE-2026-93267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21886-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21886-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case o...

Linux Distros Unpatched Vulnerability : CVE-2026-97960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe...

Linux Distros Unpatched Vulnerability : CVE-2026-93231

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles...

Redis 8.2.x < 8.2.9 / 8.4.x < 8.4.6 / 8.6.x < 8.6.6 / 8.8.x < 8.8.2 / 8.10.x < 8.10.1 Multiple Vulnerabilities

The version of Redis installed on the remote host is 8.2.x prior to 8.2.9, 8.4.x prior to 8.4.6, 8.6.x prior to 8.6.6, 8.8.x prior to 8.8.2, or 8.10.x prior to 8.10.1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability in the tlsProcessPendingData function,...

Linux Distros Unpatched Vulnerability : CVE-2026-97534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the...

FreeBSD : Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1 (60eb0bba-b668-11f1-9d0e-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 60eb0bba-b668-11f1-9d0e-4c526214c986 advisory. The Erlang/OTP project reports: OTP 29.1.1, 28.5.0.7 and 27.3.4.18 fix the following issues:...

Linux Distros Unpatched Vulnerability : CVE-2026-67233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's isauthorized/2...

Linux Distros Unpatched Vulnerability : CVE-2026-93257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: handle nogenerate/noverify properly in fs-integrity Check the BIPCHECK flags before generating or verifying PI information, otherwise this can be...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : strongSwan vulnerabilities (USN-8789-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8789-1 advisory. It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly us...

Linux Distros Unpatched Vulnerability : CVE-2026-97937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21911-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21911-1 advisory. - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decod...

Linux Distros Unpatched Vulnerability : CVE-2026-97944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/cfi: Fix FineIBT hash offset in cfigetfunchash The switch of the FineIBT preamble from subl $hash, %r10d to the shorter subl $hash, %eax moved the hash...

Fedora 46 : ntfs-3g / ntfs-3g-system-compression / partclone / testdisk / etc (2026-a2beb6a664)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a2beb6a664 advisory. ntfs-3g changes: Guard against multiple creator-owner and creator-group ACEs during ACL inheritance. ntfscat Fix missing cleanup of opened attribute on error...

Debian dsa-6515 : libvlc-bin - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6515 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6515-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-97549

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3-rc2 with MKFSOPTIONS=-n size=8192, I observed th...

Linux Distros Unpatched Vulnerability : CVE-2026-59990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a...

Linux Distros Unpatched Vulnerability : CVE-2026-97550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix unit conversions in perbinval computation LOLLM noticed that we're doing the unit conversion in the perbinval computation backwards --...

FreeBSD : p5-Image-ExifTool -- code injection via crafted media (bba381b5-b842-11f1-8205-107c614c014e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bba381b5-b842-11f1-8205-107c614c014e advisory. ExifTool versions up to 13.53 contain a code injection flaw in the Processmrld function of...

Oracle Linux 7 : abrt (ELSA-2026-69121)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69121 advisory. - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-98003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 iommu/amd: Simplify and Consolidate Virtual APIC AVIC Enablement moved the GA log...

Linux Distros Unpatched Vulnerability : CVE-2026-88357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-88371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6 function. When processing specially crafted Code 128 input, decodee ca...

Linux Distros Unpatched Vulnerability : CVE-2026-61837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology...

Linux Distros Unpatched Vulnerability : CVE-2026-67410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. wh...

Fedora 44 : squid (2026-56c3705788)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-56c3705788 advisory. - new version 7.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

openSUSE 16 Security Update : alloy (openSUSE-SU-2026:21899-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21899-1 advisory. - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs...

Linux Distros Unpatched Vulnerability : CVE-2026-97928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgputtmmapbuffer reaches via its direct MC address without programming a...

Linux Distros Unpatched Vulnerability : CVE-2026-97603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: disable DIM work before freeing qvectors idpf never drains the Tx/Rx DIM works before freeing the memory they live in. txdim and rxdim are embedded in...

Linux Distros Unpatched Vulnerability : CVE-2026-95832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49....

Linux Distros Unpatched Vulnerability : CVE-2026-67222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied listtoatom/1 to every colon-delimited...

Linux Distros Unpatched Vulnerability : CVE-2026-67412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost...

Linux Distros Unpatched Vulnerability : CVE-2026-66078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delete. dELETE...

Linux Distros Unpatched Vulnerability : CVE-2026-95834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the...

Linux Distros Unpatched Vulnerability : CVE-2026-97619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/rw: end write accounting from -kicomplete Commit b000145e9907 moved both the fsnotify calls and the write accounting out of the kiocb completion handler...