Linux Distros Unpatched Vulnerability : CVE-2026-97946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/amdnode: Fix PCI device reference counting in amdsmninit The local root pointer is a temporary variable used during the device search. Therefore, refcount...

Fedora 44 : squid (2026-56c3705788)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-56c3705788 advisory. - new version 7.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-98108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: fix chan mode for LECONNREQ + EXTFLOWCTL pchan l2capnewconnection sets default value of channel mode to match the parent channel...

Linux Distros Unpatched Vulnerability : CVE-2026-93210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint...

Linux Distros Unpatched Vulnerability : CVE-2026-97949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem...

Linux Distros Unpatched Vulnerability : CVE-2026-98060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison...

Linux Distros Unpatched Vulnerability : CVE-2026-94282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

Linux Distros Unpatched Vulnerability : CVE-2026-97572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return valu...

Linux Distros Unpatched Vulnerability : CVE-2026-97611

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old =...

openSUSE 16 Security Update : libXrender (openSUSE-SU-2026:21909-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21909-1 advisory. This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911. Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-97545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't leak newbp if xfsbtreebloaddropbuf fails LOLLM observes that in xfsbtreebloadprepblock, xfsbtreebloaddropbuf can hit an IO error if writing the delwr...

Linux Distros Unpatched Vulnerability : CVE-2026-77420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatternsString patterns, String line in...

MiracleLinux 8 : unbound-1.16.2-5.14.el8_10.4 (AXSA:2026-1917:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1917:14 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...

Debian dsa-6513 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6513 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6513-1 [email protected] https://www.debian.org/securit...

RockyLinux 9 : unbound (RLSA-2026:71487)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71487 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...

Fedora 44 : webkitgtk (2026-40db9b80a2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-40db9b80a2 advisory. Update to 2.54.0: Switch web process compositor to use Skia instead of TextureMapper. Improved damage handling that is now also used during the...

openSUSE 16: lastlog2 / libblkid-devel / libblkid-devel-static / libblkid1 / etc (openSUSE-SU-2026:21905-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21905-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when settin...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21886-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21886-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case o...

MiracleLinux 9 : skopeo-1.22.2-8.el9_8 (AXSA:2026-1913:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1913:05 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive...

Linux Distros Unpatched Vulnerability : CVE-2026-67230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesiz...

Linux Distros Unpatched Vulnerability : CVE-2026-98000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than...

Linux Distros Unpatched Vulnerability : CVE-2026-97554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory...

Fedora 45 : gssntlmssp (2026-654bf10275)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-654bf10275 advisory. Update to 1.3.2, fixes a Low security issue Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2026-97574

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Don't free the live ring's TPA state on queue restart failure bnxtqueuememalloc shallow copies the live RX ring into the clone: memcpyclone, rxr,...

Linux Distros Unpatched Vulnerability : CVE-2026-93249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to...

Linux Distros Unpatched Vulnerability : CVE-2026-97589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix wrong return code to engine in asynch callbacks When cryptofinalizehashrequest or cryptofinalizeskcipherrequest explicitly completes a request,...

Linux Distros Unpatched Vulnerability : CVE-2026-97528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error qlanvmexmtlsrsp obtains uctx, which was linked into fcport-unsolctxhead by...

Linux Distros Unpatched Vulnerability : CVE-2026-97568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the info in subflowulpclone. To fix this, no need to exte...

Linux Distros Unpatched Vulnerability : CVE-2026-67420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked...

Linux Distros Unpatched Vulnerability : CVE-2026-98045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mark faultable stack helpers as sleepable The faultable variants of bpfgetstack and bpfgettaskstack pass mayfault=true into the common stack collection cod...

Linux Distros Unpatched Vulnerability : CVE-2026-93224

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Fix unmatched rnunregister on failed accept When svcrdmaaccept takes the errout path before rpcrdmarnregister has succeeded, the existing cleanup bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-97609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit,...

Linux Distros Unpatched Vulnerability : CVE-2026-97585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix double-unmap of directory block Fix afseditdirremove to use a cleanup function to unmap the block pointed to by afsdiriter::block if it's left pointing...

Linux Distros Unpatched Vulnerability : CVE-2026-98039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Require MEMPERCPU for percpu kptr stores mapkptrmatchtype treats permflags as the set of register type flags that a kptr field permits. Adding MEMPERCPU to...

Linux Distros Unpatched Vulnerability : CVE-2026-97981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming...

RockyLinux 8 : kernel (RLSA-2026:71329)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71329 advisory. kernel: drm/amdgpu: Fix fence put before wait in amdgpuamdkfdsubmitib CVE-2026-31566 kernel: netfilter: nfqueue: hold bridge skb-dev while queued...

Linux Distros Unpatched Vulnerability : CVE-2026-95835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtai...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerability (USN-8778-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8778-1 advisory. It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when...

Linux Distros Unpatched Vulnerability : CVE-2026-67239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-95519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar...

Linux Distros Unpatched Vulnerability : CVE-2026-88351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32...

Linux Distros Unpatched Vulnerability : CVE-2026-97601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: 6lowpan: fix NULL dereference in lowpannewlink TUNSETLINK allows a TUN device to change its link-layer type to ARPHRDIEEE802154 without initializing...

Linux Distros Unpatched Vulnerability : CVE-2026-88839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of- bounds write of heap pointers. CVE-2026-88839 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-98056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: remove stale namespaces by NSID range during scan nvmescannslist drops the stale namespaces in each gap in the reported NSID list one NSID at a time. Ever...

openSUSE 16 Security Update : jsoup, re2j (openSUSE-SU-2026:21900-1)

"The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21900-1 advisory. This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element,...

Linux Distros Unpatched Vulnerability : CVE-2026-100076

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together wi...

Linux Distros Unpatched Vulnerability : CVE-2026-98128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix target device refcount leak in mpi3mrsasportadd mpi3mrgettgtdevbyaddr increments the target device kref when it returns a device. If a...

Erlang/OTP 22.2 < 27.3.4.18 / 28.0 < 28.5.0.7 / 29.0 < 29.1.1 TLS 1.3 Server Authentication Bypass (CVE-2026-89422)

The version of Erlang/OTP installed on the remote host is 22.2 prior to 27.3.4.18, 28.0 prior to 28.5.0.7, or 29.0 prior to 29.1.1. It is, therefore, affected by a vulnerability: - Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 clie...

RHCOS 4 : OpenShift Container Platform 4.15.69 (RHSA-2026:67856)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67856 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...