Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146840 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after...

Linux Distros Unpatched Vulnerability : CVE-2026-118003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-99136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-crypt: fix a tiny race condition in cryptdecpending cryptdecpending reads io-error before calling atomicdecandtest. Another context, for example cryptendio...

Linux Distros Unpatched Vulnerability : CVE-2026-118174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sende...

Linux Distros Unpatched Vulnerability : CVE-2026-117966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146618 advisory. In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls...

Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3111 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146249 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP...

Linux Distros Unpatched Vulnerability : CVE-2026-116731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM that allows attackers to corrupt heap memory via an unchecked subson...

Linux Distros Unpatched Vulnerability : CVE-2026-58496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.c...

Linux Distros Unpatched Vulnerability : CVE-2026-99185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firewire: core: fix race condition in split transaction handling For a split transaction, either fwcorehandleresponse or splittransactiontimeoutcallback may...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146615)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146615 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and...

Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793184227)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793184227 advisory. - Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization...

Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1793105536)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793105536 advisory. - Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names e.g., Content-Length and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146656 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146847 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at t...

SUSE SLES15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2026:4919-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4919-1 advisory. This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146675 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read BUG A corrupted append-DIO dinode high byte at...

Linux Distros Unpatched Vulnerability : CVE-2026-99196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000probe calls au1000miiprobe, which...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146698 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare lock owner -- its only...

Linux Distros Unpatched Vulnerability : CVE-2026-99183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: search every core slot when looking up a scheduler schedtocore walks rdev-cores up to rdev-numcores, and rocketremove decrements numcores for ever...

Linux Distros Unpatched Vulnerability : CVE-2026-118013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118013 Note th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146651 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xxreportidacquisition In the format 1 path, the virtu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146825 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable...

Rocky Linux 9.6 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793179951)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793179951 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the librar...

Oracle Linux 9 : cjose (ELSA-2026-90812)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90812 advisory. 0.6.1-17.1 - CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap Resolves: RHEL-256972 Tenable has extracted the preceding description block directly...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc (crlsa-2026_89746)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689746 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the CIQ...

Linux Distros Unpatched Vulnerability : CVE-2026-118000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be foun...

AlmaLinux 9.6 [TuxCare] Security Update: delve Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793215478)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793215478 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be...

Linux Distros Unpatched Vulnerability : CVE-2026-117989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11798...

Linux Distros Unpatched Vulnerability : CVE-2026-118007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118007 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-118179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even if it was no...

Linux Distros Unpatched Vulnerability : CVE-2026-99204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debugstateprint walks reco.nodedata and formats...

Linux Distros Unpatched Vulnerability : CVE-2026-116673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied...

Linux Distros Unpatched Vulnerability : CVE-2026-108525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to...

SUSE SLES15 Security Update : podman (SUSE-SU-2026:4920-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4920-1 advisory. This update for podman rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-99187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix perfpmumigratecontext leaving events behind perfpmuremove walks the group leaders of a CPU and PMU with perfeventgroupsforcpupmu, removing each one as...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146697 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd...

Linux Distros Unpatched Vulnerability : CVE-2026-118022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118022...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146670 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes n...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-89760)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89760 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 - rebuild with updated ...

AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1793105536)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793105536 advisory. - Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names e.g., Content-Length and...

Linux Distros Unpatched Vulnerability : CVE-2026-117999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117999 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-99188

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 net: stmmac: remove SGMII/RGMII/SMII interrupt handling nothing on the RGMII...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146609 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION th...

Linux Distros Unpatched Vulnerability : CVE-2026-99193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssmpruethnetdevinit calls...

Linux Distros Unpatched Vulnerability : CVE-2026-114213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthenticated remote...