Linux Distros Unpatched Vulnerability : CVE-2026-67226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps...

Linux Distros Unpatched Vulnerability : CVE-2026-97609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit,...

Linux Distros Unpatched Vulnerability : CVE-2026-97926

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ufs: validate cylinder group metadata before caching it ufsreadcylinder copies the cylinder group index and the rotor positions straight from the on-disk group...

Linux Distros Unpatched Vulnerability : CVE-2026-97963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: initialize ptplock at probe time priv-ptplock is only initialized in stmmacptpregister, which runs during stmmacopen. However, the lock is also use...

Linux Distros Unpatched Vulnerability : CVE-2026-97964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pppsynctty: ensure a writeable skb header pppsynctxmunge checks headroom before prepending the address and control bytes, but does not ensure that the skb heade...

Linux Distros Unpatched Vulnerability : CVE-2026-97971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nstree: check listing permission before taking a namespace reference legitimizens takes a reference on the candidate namespace before maylistns has decided...

Linux Distros Unpatched Vulnerability : CVE-2026-97981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming...

Linux Distros Unpatched Vulnerability : CVE-2026-98013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table qdiscpktlen reaches ...

Linux Distros Unpatched Vulnerability : CVE-2026-98019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: mark a NULL call argument precise checkfuncarg allows bpfregisterisnull for nullable arguments w/o marking the underlying scalar register precise. Hence a...

Linux Distros Unpatched Vulnerability : CVE-2026-98032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix subbuf resize races with tracepiperaw readers Concurrent subbuffer resizes may crash tracepiperaw readers or leak uninitialized memory to userspace...

Linux Distros Unpatched Vulnerability : CVE-2026-98045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mark faultable stack helpers as sleepable The faultable variants of bpfgetstack and bpfgettaskstack pass mayfault=true into the common stack collection cod...

Linux Distros Unpatched Vulnerability : CVE-2026-98056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: remove stale namespaces by NSID range during scan nvmescannslist drops the stale namespaces in each gap in the reported NSID list one NSID at a time. Ever...

Linux Distros Unpatched Vulnerability : CVE-2026-98112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket...

Linux Distros Unpatched Vulnerability : CVE-2026-98113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request...

Linux Distros Unpatched Vulnerability : CVE-2026-98121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313ewdtprobe doesn't set the driver data for the platform device. As a result, devgetdrvdata ...

Linux Distros Unpatched Vulnerability : CVE-2026-98140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: fix kmaplocal leak in writemftrecordnolock error paths writemftrecordnolock maps the MFT record folio with kmaplocalfolio, but the prewritemstfixup and...

Linux Distros Unpatched Vulnerability : CVE-2026-67241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check...

Linux Distros Unpatched Vulnerability : CVE-2026-67406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and c...

Linux Distros Unpatched Vulnerability : CVE-2026-97605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before allocating its replacement. If an allocation fails...

Linux Distros Unpatched Vulnerability : CVE-2026-97931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE s...

Linux Distros Unpatched Vulnerability : CVE-2026-97959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the...

Linux Distros Unpatched Vulnerability : CVE-2026-97995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtioconsole: do not free control-out buffers on remove sendcontrolmsg publishes &portdev-cpkt as the control-out virtqueue cookie. removevqs walks every...

Linux Distros Unpatched Vulnerability : CVE-2026-98022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap txqueuelen at S16MAX to prevent oversized ring allocations Several subsystems allocate ring buffers sized by dev-txqueuelen with no upper bound. An...

Linux Distros Unpatched Vulnerability : CVE-2026-98039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Require MEMPERCPU for percpu kptr stores mapkptrmatchtype treats permflags as the set of register type flags that a kptr field permits. Adding MEMPERCPU to...

Linux Distros Unpatched Vulnerability : CVE-2026-98063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NULL-ptr-deref in btfvarshow btfvarshow calls btftypeidresolve unconditionally, which dereferences btf-resolvedids. That is NULL for a base BTF - e.g...

Linux Distros Unpatched Vulnerability : CVE-2026-98135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: reject invalid sectorspercluster in the boot sector isbootsectorntfs checks the boot sector's sectorspercluster field with a range test that rejects...

Linux Distros Unpatched Vulnerability : CVE-2026-98141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the...

Linux Distros Unpatched Vulnerability : CVE-2026-97529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Validate BSG requestlen before reading vendorcmd The FC BSG transport allocates job-request via memdupuser using the exact user-supplied...

Linux Distros Unpatched Vulnerability : CVE-2026-97564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject userspace cifs.idmap descriptions cifs.idmap key descriptions carry authority-bearing fields owner and group SIDs and uid/gid values in...

Linux Distros Unpatched Vulnerability : CVE-2026-97568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the info in subflowulpclone. To fix this, no need to exte...

Linux Distros Unpatched Vulnerability : CVE-2026-97596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For...

Linux Distros Unpatched Vulnerability : CVE-2026-97615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a global brframetype whose hlistnode is linked into the per-bridge frametypelist wh...

Linux Distros Unpatched Vulnerability : CVE-2026-97616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: release all action references on NEWACTION failure When a batched RTMNEWACTION request replaces an existing action, tcfidrcheckalloc takes a...

Linux Distros Unpatched Vulnerability : CVE-2026-97943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This...

Linux Distros Unpatched Vulnerability : CVE-2026-97951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iscsi: Fix hang for aborted WRITEPENDING commands When a LUNRESET aborts a WRITE command that is in the TRANSPORTWRITEPENDING state, the target co...

Linux Distros Unpatched Vulnerability : CVE-2026-98081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: zoned: finish active block group cleanup if callzonefinish fails dozonefinish clears BLOCKGROUPFLAGZONEISACTIVE before finishing the zones. If...

Linux Distros Unpatched Vulnerability : CVE-2026-98096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at the Segment Routing Header SRH while skbnetworkheader points at...

Linux Distros Unpatched Vulnerability : CVE-2026-98139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: only count successfully cleared runs when freeing clusters ntfsclusterfreefromrlnolock adds a run's length to nrfreed whenever the error bookkeeping...

Linux Distros Unpatched Vulnerability : CVE-2026-98146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the...

Linux Distros Unpatched Vulnerability : CVE-2026-98147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - printk: Don't WARN on kthreadrun failure. Since kthreadcreateonnode returns -EINTR upon SIGKILL, we should not use WARNON in order to catch kthreadrun failure...

Fedora 45 : chromium (2026-735231f9e0)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-735231f9e0 advisory. Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8817-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8817-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made...

Linux Distros Unpatched Vulnerability : CVE-2026-96883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user ...

Linux Distros Unpatched Vulnerability : CVE-2026-67230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesiz...

Linux Distros Unpatched Vulnerability : CVE-2026-67408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows...

Linux Distros Unpatched Vulnerability : CVE-2026-97527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock The fcport-unsolctxhead list is modified from several contexts without a common lock. Entrie...

Linux Distros Unpatched Vulnerability : CVE-2026-17545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when...

Linux Distros Unpatched Vulnerability : CVE-2026-57179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial- pipeline resume mechanism accepted partialtoken as a...

Linux Distros Unpatched Vulnerability : CVE-2026-79310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that...

Linux Distros Unpatched Vulnerability : CVE-2026-88369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump. CVE-2026-88369 Note that Nessus relies on the presence of the package as...