Linux Distros Unpatched Vulnerability : CVE-2026-97504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: lenovose10wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set...

Linux Distros Unpatched Vulnerability : CVE-2026-97508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return...

Linux Distros Unpatched Vulnerability : CVE-2026-97512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an...

Linux Distros Unpatched Vulnerability : CVE-2026-97516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edcca...

Linux Distros Unpatched Vulnerability : CVE-2026-97517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size...

Linux Distros Unpatched Vulnerability : CVE-2026-97445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: Enhance buffer validation in acpiutwalkamlresources Enhance buffer validation in acpiutwalkamlresources to prevent buffer overflows. CVE-2026-97445 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-97502

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: davinci: avoid NULL deref of host-data in IRQ handler mmcdavinciirq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL &&...

Linux Distros Unpatched Vulnerability : CVE-2026-97514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the...

Linux Distros Unpatched Vulnerability : CVE-2026-97520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression...

Linux Distros Unpatched Vulnerability : CVE-2026-97521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used...

Linux Distros Unpatched Vulnerability : CVE-2026-93271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be...

Linux Distros Unpatched Vulnerability : CVE-2026-93288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: nfnllognetexit calls nflogunset, which clears the logger pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-93785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key-datalen, which is limited to U16MAX. Accepting a larger key...

Linux Distros Unpatched Vulnerability : CVE-2026-93813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: tree-checker: validate INODEREF's namelen BUG A crafted btrfs image can trigger the following crash: BUG: unable to handle page fault for address:...

Linux Distros Unpatched Vulnerability : CVE-2026-93824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: reject the combination of TLS and sockmap TLS and sockmap BPF psock integration hides a lot of latent bugs. Bugs which may be more or less relevant for rea...

Linux Distros Unpatched Vulnerability : CVE-2026-93826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: hidpp: fix potential UAF in hidppconnectevent If inputregisterdevice fails, we call inputfreedevice, but keep stale pointer to the old device in hidpp-inpu...

Linux Distros Unpatched Vulnerability : CVE-2026-96889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free err...

Linux Distros Unpatched Vulnerability : CVE-2026-97412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pdscore: quiesce DMA before freeing resources pdscteardown frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after th...

Linux Distros Unpatched Vulnerability : CVE-2026-97415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: tree-checker: validate names in ROOTREF and ROOTBACKREF ROOTREF and ROOTBACKREF items contain a struct btrfsrootref followed by the subvolume name. Sever...

Linux Distros Unpatched Vulnerability : CVE-2026-97417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrack: use getunalignedbe32 in tcpsack The timestamp-only fast path dereferences the option stream as be32 ptr, which assumes 4-byte alignment...

Linux Distros Unpatched Vulnerability : CVE-2026-97425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer...

Linux Distros Unpatched Vulnerability : CVE-2026-97434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by a...

Linux Distros Unpatched Vulnerability : CVE-2026-66072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw...

Linux Distros Unpatched Vulnerability : CVE-2026-66074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, matchvalue/3 passes the user-supplied ?name= regular...

Linux Distros Unpatched Vulnerability : CVE-2026-77399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fromical accepts an attacker-controlled...

Linux Distros Unpatched Vulnerability : CVE-2026-93268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handl...

Linux Distros Unpatched Vulnerability : CVE-2026-93273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to fi...

Linux Distros Unpatched Vulnerability : CVE-2026-93281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below...

Linux Distros Unpatched Vulnerability : CVE-2026-93781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: Do not block on tag allocation in scsiehlockdoor scsiehlockdoor is called from scsirestartoperations while the host is still in the SHOSTRECOVERY...

Linux Distros Unpatched Vulnerability : CVE-2026-93797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough. CVE-2026-93797 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2026-93798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix reloc root cleanup in mergerelocroots If the root we got has zero root refs in its root item, we are resetting the root's -relocroot without using...

Linux Distros Unpatched Vulnerability : CVE-2026-93805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211rxmlmemgmt and cfg80211txmlmemgmt call tracepoints before rejecting frames...

Linux Distros Unpatched Vulnerability : CVE-2026-93806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate assoc response length before status and IE access cfg80211rxassocresp initialises the status and response-IE fields of...

Linux Distros Unpatched Vulnerability : CVE-2026-93810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: Fix double fput Fix a double fput in error handling in cachefilescreatetmpfile. CVE-2026-93810 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2026-93822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: iproc: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent...

RHEL 9 : perl-DBI (RHSA-2026:71422)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:71422 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

Fedora 45 : mingw-gdk-pixbuf (2026-26573b6029)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-26573b6029 advisory. Backport fixes for CVE-2026-16768 and CVE-2026-81893. Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-67218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls...

Linux Distros Unpatched Vulnerability : CVE-2026-77756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header...

Linux Distros Unpatched Vulnerability : CVE-2026-91769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC...

Linux Distros Unpatched Vulnerability : CVE-2026-92842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is...

Linux Distros Unpatched Vulnerability : CVE-2026-92700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden uses...

Linux Distros Unpatched Vulnerability : CVE-2026-93543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93543 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-73581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses...

Linux Distros Unpatched Vulnerability : CVE-2026-86247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some...

Linux Distros Unpatched Vulnerability : CVE-2026-97500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range...

RHEL 8 : libxml2 (RHSA-2026:71641)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71641 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2026-124535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124535 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header tha...

Linux Distros Unpatched Vulnerability : CVE-2026-95625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124478 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...