Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146667 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hidsensorcustomaddattributes create...

Linux Distros Unpatched Vulnerability : CVE-2026-118311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Oracle Linux 8 : gcc-toolset-15-gcc (ELSA-2026-90915)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90915 advisory. 15.2.1-7.2 - fix CVE-2026-102010, PR libstdc++/127656 RHEL-272113 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-117903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir...

Linux Distros Unpatched Vulnerability : CVE-2026-99096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/register: don't exempt disabled rings from task restrictions A ring created with IORINGSETUPRDISABLED is exempt from its register restrictions until it ...

Linux Distros Unpatched Vulnerability : CVE-2026-57190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-99153

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rejects, and iscsihandlereject takes the ITT out of tha...

Fedora 43 : stargz-snapshotter (2026-75361a79cf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-75361a79cf advisory. Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on...

Linux Distros Unpatched Vulnerability : CVE-2026-99111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix data corruption with concurrent writes and OTRUNC cifsdotruncate flushes dirty pages with filemapwriteandwait and truncates the file on the...

Linux Distros Unpatched Vulnerability : CVE-2026-81039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth host pre-allocates a btconn object a reservation from the fixed aclconns pool for every connectable advertising set it starts, in leadvstartaddcon...

Linux Distros Unpatched Vulnerability : CVE-2026-117953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Fedora 44 : util-linux (2026-7f54b8305d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f54b8305d advisory. Upgrade to upstream release v2.41.6 for security-related changes. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : libinstpatch (2026-7f1bcc426b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f1bcc426b advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-99190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpiolib: fix memory leak in gpiodsetarrayvaluecomplex on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochipsetmultiple,...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1793210765)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793210765 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

Linux Distros Unpatched Vulnerability : CVE-2026-117945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-116688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit versio...

Fedora 43 : util-linux (2026-b7a077a212)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7a077a212 advisory. Upgrade to upstream release v2.41.6 with security-related patches. Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-117974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146869)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146869 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146248 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Linux Distros Unpatched Vulnerability : CVE-2024-58399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b2731 contains an out-of-bounds read vulnerability in llamamodelloader that allows attackers to read memory outside the mapped model file via...

Linux Distros Unpatched Vulnerability : CVE-2026-118356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-117930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: free the sbi after a grace period If the nocase mount option ntfs3 uses custom hash and dentry compare functions. Both access ntfs3 superblock private...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146836 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table ro...

Linux Distros Unpatched Vulnerability : CVE-2026-118176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146823)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146823 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind...

Linux Distros Unpatched Vulnerability : CVE-2026-99157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: bsg: Pass replylen to bsgsetupqueue to fit UFS ARPMB replies bsg-lib allocates a 96-byte SCSISENSEBUFFERSIZE reply buffer per job, but struct ufsrpmbreply...

Linux Distros Unpatched Vulnerability : CVE-2026-118327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146626 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's...

Linux Distros Unpatched Vulnerability : CVE-2026-117968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-117876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146640 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinxdma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146646)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146646 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rspinfolen to avoid OOB sense-data read In qla2x00statusentry, the FWI2...

Linux Distros Unpatched Vulnerability : CVE-2026-117933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

MiracleLinux 9 : xz-5.2.5-8.el9_8.1 (AXSA:2026-2179:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2179:01 advisory. xz: XZ Utils: Denial of Service via buffer overflow in index decoding CVE-2026-34743 Tenable has extracted the preceding description block directly from the...

AlmaLinux 10 : emacs (ALSA-2026:90887)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90887 advisory. emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 Tenable has extracted the preceding description block directly from the AlmaLinux...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146660 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to...

Linux Distros Unpatched Vulnerability : CVE-2026-99115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fill in FileSysIdentifier in FSPOSIXINFORMATION smb2getinfofilesystem reports 56 bytes for FSPOSIXINFORMATION, that is the whole of FILESYSTEMPOSIXINFO,...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89860)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689860 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via intege...

Linux Distros Unpatched Vulnerability : CVE-2026-117952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-116218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146630)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146630 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp-mask The NFSACL v2 SETACL path shares the decoder convention used...

Rocky Linux 10.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_89732)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689732 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-117991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146841 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146619 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process...

Linux Distros Unpatched Vulnerability : CVE-2026-99162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we'...