Linux Distros Unpatched Vulnerability : CVE-2026-53769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks...

Fedora 44 : chromium (2026-19cbaba275)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-19cbaba275 advisory. Update to 152.0.7977.82 CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in CrashReporting CVE-2026-85043: Incomplete cleanup...

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

Slackware Linux 15.0 / current util-linux Multiple Vulnerabilities (SSA:2026-249-03)

The version of util-linux installed on the remote host is prior to 2.42.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-03 advisory. New util-linux packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-86315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...

Fedora 44 : gegl04 (2026-79b351972c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79b351972c advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...

Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-249-01)

The version of libpcap installed on the remote host is prior to 1.10.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-01 advisory. New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053369 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: drop any code related to SCMRIGHTS This is dead code after we dropped support for passin...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-035846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035846 advisory. A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053292 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9clientrpc Syzbot with the help of KMSAN reported the following erro...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053443 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-57165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053400)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053400 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CI...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053437 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053204 advisory. In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmamfreecoherent dmamfreecoherent frees a DMA allocation, which makes the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053200 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: fix overflows checks in provide buffers Colin reported before possible overflow and sign...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053343 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the below cras...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022349 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053289 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053259 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtkallocclkdata Add the check for the return value of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053197 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in ip6makeskb As it was done in commit fc1092f51567 ipv4:...

FreeBSD : Roundcube -- Multiple vulnerabilities (e7726f5e-a9d0-11f1-93c7-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e7726f5e-a9d0-11f1-93c7-8447094a420f advisory. The Roundcube project reports: Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022334 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Linux Distros Unpatched Vulnerability : CVE-2026-57166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053216 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfiointxenable If vfioirqctxalloc failed will lead to 'nam...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053316 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reinitialize delayed ref list after deleting it from the list At insertdelayedref if we ne...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053299 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: etcd (UTSA-2022-001270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001270 advisory. In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053306 advisory. In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053213 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kernmount fails and returns an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053368 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUTVSCREENINFO Much like commit 19f953e74356 fbdev:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053435 advisory. In the Linux kernel, the following vulnerability has been resolved: inetdiag: Initialize pad field in struct inetdiagreqv2 KMSAN reported uninit-value access in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053419 advisory. In the Linux kernel, the following vulnerability has been resolved: net: do not delay dstentriesadd in dstrelease dstentriesadd uses per-cpu data that might be freed...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053214)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053214 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053331 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value size when calling amdgpuvcecsreloc Initialize the size befo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053206)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053206 advisory. In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in freepages When we upgraded our kernel, we started...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053322)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053322 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftracelocation KASAN reports a bug: BUG: KASAN:...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022324 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053264 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053284 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4write and ext4convertinlinedata Hulk Robot reported a BUGON:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-085346)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085346 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the followi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053205 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifsdebugdataprocshow Skip SMB sessions that are being...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001462 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied individually...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053275 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when link nums greater than maxlinks Why Coverity repor...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053277 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053436 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: fix small mempool leak in SMB2negotiate In some cases of failure dialect mismatches in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053428 advisory. In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one devic...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053269 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073355 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DM...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053238 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmctest: Fix NULL dereference on allocation failure If the test-highmem = allocpages...