Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146701)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146701 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146643)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146643 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronizenet in gtpnewlink error path to prevent use-after-free gtpnewlink's error pat...

TencentOS Server 4: lrzsz (TSSA-2026:1207)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1207 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-117946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793191614)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793191614 advisory. - ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application...

Linux Distros Unpatched Vulnerability : CVE-2026-99139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix use-after-free in dotcpgetsockoptTCPCONGESTION dotcpgetsockopt reads icsk-icskcaops-name without holding rcureadlock. Since commit 0baf26b0fcd7 bpf: tc...

Linux Distros Unpatched Vulnerability : CVE-2026-108529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-117929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146707 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series ocfs2/dlm: bound peer-controlled...

Linux Distros Unpatched Vulnerability : CVE-2026-99100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: p54: validate firmware record lengths The p54 firmware parser accesses component ID and component version records without checking that their lengths cove...

Linux Distros Unpatched Vulnerability : CVE-2026-99208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Zero OA buffer at allocation ttmbotypekernel BOs are not guaranteed to be zeroed on allocation and may contain data from previously freed pages. Sinc...

SUSE SLES15 Security Update : suseconnect-ng (SUSE-SU-2026:4918-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4918-1 advisory. This update for suseconnect-ng rebuilds it against the current go security release. Tenable has extracted the preceding description block...

Oracle Java SE Vulnerability (Security Alert CVE-2026-114820)

The version of Java installed on the remote host is prior to 8u511-b33, 11.0.33.0.3, 17.0.21.0.3, 21.0.13.0.3, 25.0.5.0.3, or 27.0.1.0.3. It is, therefore, affected by a vulnerability as referenced in the Oracle Security Alert for CVE-2026-114820. The fixed releases remove the impacted eMudhra ro...

Linux Distros Unpatched Vulnerability : CVE-2026-117501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2401 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content leng...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146617 advisory. In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy ua...

Linux Distros Unpatched Vulnerability : CVE-2026-117971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146638 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede...

Linux Distros Unpatched Vulnerability : CVE-2026-116266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. The multipartboundary...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146659)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146659 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: add fhwantwrite for early-verified SETATTR in nfsdprocsetattr The BOTHTIMESET branch calls...

Linux Distros Unpatched Vulnerability : CVE-2026-99117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146624 advisory. In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skbtxerror the source skb in skbzerocopy skbzerocopy copies frags from @from...

Linux Distros Unpatched Vulnerability : CVE-2026-99161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: viai2c-wmt: Fix clock leak in wmti2cprobe In wmti2cprobe, i2c-clk is acquired using ofclkget. If any subsequent operation fails or when the module is...

Linux Distros Unpatched Vulnerability : CVE-2026-99154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Reject a negative task index from parsepduitt A transport that implements parsepduitt hands libiscsi an index taken from the PDU, and both looku...

Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_89744)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689744 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/http: golang: golang: Denial of Service via crafted HTTP Ran...

Linux Distros Unpatched Vulnerability : CVE-2026-118177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations...

Linux Distros Unpatched Vulnerability : CVE-2026-118175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the...

Linux Distros Unpatched Vulnerability : CVE-2026-99195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash ethocprobe calls ethocmdioprobe, which...

Linux Distros Unpatched Vulnerability : CVE-2026-81038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Befor...

Linux Distros Unpatched Vulnerability : CVE-2026-117866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146614)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146614 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6inputaddr when secpath is full The depth check in...

Linux Distros Unpatched Vulnerability : CVE-2026-57201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-99146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/dmc: Add sanity check for DMC load address For DMC firmware header version 3, the firmware load address is stored in dmcinfo-startmmioaddr and later us...

Fedora 43 : kernel (2026-bdde82ac9e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bdde82ac9e advisory. The 7.2.13 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-118005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118005 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-118353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-118359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-117915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,...

Linux Distros Unpatched Vulnerability : CVE-2026-117954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/dmc: Harden DMC firmware payload parsing Validate the conversion of the DMC firmware size from dwords to bytes using checkmuloverflow before calculatin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146634 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvmesetupdiscard always maps sizeofstruct nvmedsmrange...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146817 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146663 advisory. In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146662)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146662 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89747)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689747 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

AlmaLinux 9.6 [TuxCare] Security Update: libical / libical-devel / libical-glib / libical-glib-devel / etc (ALMALINUX9.6:CLSA-2026:1793175419)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793175419 advisory. - libical through 4.0.6 contains a heap-based out-of-bounds read in icalvaluedecodeicalstring in src/libical/icalvalue.c when decoding input...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146687 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads...

Linux Distros Unpatched Vulnerability : CVE-2026-99097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tee: shm: reject zero-sized allocations in teedynshmallochelper teedynshmallochelper derives nrpages from a caller-supplied size and passes it to allocpagesexac...

Linux Distros Unpatched Vulnerability : CVE-2026-118317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146668 advisory. In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata field...

Linux Distros Unpatched Vulnerability : CVE-2025-71439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversize...