Linux Distros Unpatched Vulnerability : CVE-2026-99144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue A deferred...

Linux Distros Unpatched Vulnerability : CVE-2026-99162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we'...

Linux Distros Unpatched Vulnerability : CVE-2026-117953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-81039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth host pre-allocates a btconn object a reservation from the fixed aclconns pool for every connectable advertising set it starts, in leadvstartaddcon...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-136)

The version of kernel installed on the remote host is prior to 5.10.271-272.1120. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-136 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in foucreat...

Linux Distros Unpatched Vulnerability : CVE-2026-57190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Rocky Linux 10.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_89732)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689732 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146841 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146826 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length...

AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1793210765)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793210765 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

AlmaLinux 9.2 [TuxCare] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793193455)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793193455 advisory. - EDK2 contains a vulnerability in BIOS where an attacker may cause Improper Input Validation by local access. Successful exploitati...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146610)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146610 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in slsync slipdevs stores bare netdevice pointers and takes no referenc...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146246 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the...

Linux Distros Unpatched Vulnerability : CVE-2026-116576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146613 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes eac...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146821 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-117984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,...

Linux Distros Unpatched Vulnerability : CVE-2026-99170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e...

MiracleLinux 8 : libreswan-4.12-2.el8_10.7 (AXSA:2026-2190:04)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2190:04 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Linux Distros Unpatched Vulnerability : CVE-2026-116273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to...

Linux Distros Unpatched Vulnerability : CVE-2026-118018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. CVE-2026-118018 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-118356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-117870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Oracle Linux 8 : thunderbird (ELSA-2026-90913)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90913 advisory. 140.17.0-1.0.1 - Add Oracle prefs file 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-116804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify from 3.4.4 before 3.4.17 contains a SAFEFORTEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using...

Linux Distros Unpatched Vulnerability : CVE-2026-117874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Fedora 44 : libinstpatch (2026-4f2f5250d6)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4f2f5250d6 advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146906 advisory. In the Linux kernel, the following vulnerability has been resolved: srcu: Tighten cleanupsrcustruct GP checks Currently, cleanupsrcustruct checks for a grace period ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146655 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6gre: fix hardware header length for NBMA tunnels ip6gretnllinkconfigroute accumulates the lowe...

Linux Distros Unpatched Vulnerability : CVE-2026-117610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that mishandles the XMLTOKNONE token...

Linux Distros Unpatched Vulnerability : CVE-2026-99211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKFNETOFF and SKFLLOFF to read relative to an skb's network and MAC...

Linux Distros Unpatched Vulnerability : CVE-2026-57197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-118017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118017 Note that Nessus relies on the presence of...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146251 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound...

Linux Distros Unpatched Vulnerability : CVE-2026-117950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...

AlmaLinux 8 : webkit2gtk3 (ALSA-2026:91636)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:91636 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browser:...

Linux Distros Unpatched Vulnerability : CVE-2026-99093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: don't schedule deferred kernel page table freeing while booting Booting with a boot-time function tracer and a filter, for example ftrace=function...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146827 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in cleandemultiplexinfo cleandemultiplexinfo cancels server-ec...

Linux Distros Unpatched Vulnerability : CVE-2026-99202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libsas: Fix SMP IO deadlock during HA resume smpexecutetasksg calls pmruntimegetsync on the host before issuing an SMP command. When that command is itsel...

Linux Distros Unpatched Vulnerability : CVE-2026-117884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146620 advisory. In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the...

Linux Distros Unpatched Vulnerability : CVE-2026-117911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 x86/insn: Simplify foreachinsnprefix made foreachinsnprefix declare its ow...

Rocky Linux 10.2 [CIQ] Security Update: libreswan / libreswan-debugsource / libreswan-minimal / etc Multiple Vulnerabilities (crlsa-2026_89923)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689923 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: Denial of Service via sending bogus X.509 certificates...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146635 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then...

Linux Distros Unpatched Vulnerability : CVE-2026-99194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to fix crash grethofprobe calls grethmdioini...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146869)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146869 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146248 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Linux Distros Unpatched Vulnerability : CVE-2024-58399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b2731 contains an out-of-bounds read vulnerability in llamamodelloader that allows attackers to read memory outside the mapped model file via...