Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146649 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series ocfs2: validate active orphan slots...

Linux Distros Unpatched Vulnerability : CVE-2026-118335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146696 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146671 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously...

Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio (ALMALINUX9.6:CLSA-2026:1793107993)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793107993 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software componen...

Linux Distros Unpatched Vulnerability : CVE-2026-116269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename. A parameter su...

Linux Distros Unpatched Vulnerability : CVE-2026-111103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated remote attacker to bypass per-connection...

Linux Distros Unpatched Vulnerability : CVE-2026-99152

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that...

Linux Distros Unpatched Vulnerability : CVE-2026-117959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-116219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146616 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafbinit registers the v86d...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146703 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

Linux Distros Unpatched Vulnerability : CVE-2026-117869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

AlmaLinux 10 : libX11 (ALSA-2026:91366)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:91366 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the AlmaLinu...

Rocky Linux 9 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2026_89742)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689742 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification bypa...

Linux Distros Unpatched Vulnerability : CVE-2026-78661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated an...

Linux Distros Unpatched Vulnerability : CVE-2026-118355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio (ALMALINUX9.6:CLSA-2026:1793107993)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793107993 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components...

Linux Distros Unpatched Vulnerability : CVE-2026-117887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-57187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Rocky Linux 8 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2026_89859)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689859 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary wri...

Linux Distros Unpatched Vulnerability : CVE-2026-118023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118023 Note...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146633 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packe...

Linux Distros Unpatched Vulnerability : CVE-2026-117919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfsattrrecordresize ntfsnewattrflags passe...

Linux Distros Unpatched Vulnerability : CVE-2026-116270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated =? sequences in decodemimewords. For each =? that does not start a complete...

Linux Distros Unpatched Vulnerability : CVE-2026-99103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - workqueue: Fix unbound pool lifetime for pending pwqs KASAN reports a use-after-free of an unbound workerpool in nodeactivatependingpwq: BUG: KASAN:...

MiracleLinux 9 : skopeo-1.22.2-9.el9_8 (AXSA:2026-2182:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2182:06 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Linux Distros Unpatched Vulnerability : CVE-2026-117886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-117872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146843 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check for TSO traffic stmmactsoxmit estimates the...

Linux Distros Unpatched Vulnerability : CVE-2026-117907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-118354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-118004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,...

Linux Distros Unpatched Vulnerability : CVE-2026-99127

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pagepool: keep fragoffset aligned for odd-sized requests pagepoolallocfragnetmem rounds the requested fragment size with size = ALIGNsize, dmagetcachealignment...

Linux Distros Unpatched Vulnerability : CVE-2026-105626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793183117)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793183117 advisory. - Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization heade...

Linux Distros Unpatched Vulnerability : CVE-2026-111101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthenticated remote attack...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146665 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucvhsrcv by ingress device afiucvhsrcv selects a socket from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146641)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146641 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gsskrb5verifymicv2 gsskrb5verifymicv2 reads the token...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146627 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy isr table To be able to unregister stuff from isrs, the corresponding...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146816 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: ib: use rdsconndrop on protocol version mismatch rdsibcmconnectcomplete runs from the RDMA-C...

Linux Distros Unpatched Vulnerability : CVE-2026-117981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117947 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-99180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unicode: free the map after a grace period genericcidhash and genericcidcompare read sb-sencoding and dereference the unicode map while a pathwalk in rcu mode...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-2186:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2186:01 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-99133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/iucv: fix the recvmsg window update iucvsockrecvmsg sends the HiperSockets-only AFIUCVFLAGWIN without testing the transport, so on a classic z/VM socket...

Linux Distros Unpatched Vulnerability : CVE-2026-117979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,...

Linux Distros Unpatched Vulnerability : CVE-2026-117978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an...

Linux Distros Unpatched Vulnerability : CVE-2026-117883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...