Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146635 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then...

Linux Distros Unpatched Vulnerability : CVE-2026-99141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix crash in printgraphfunctionevent tracingsettracer assigns the flags of the newly selected tracer with: tr-currenttraceflags = t-flags ? :...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146827 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in cleandemultiplexinfo cleandemultiplexinfo cancels server-ec...

Linux Distros Unpatched Vulnerability : CVE-2026-99202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libsas: Fix SMP IO deadlock during HA resume smpexecutetasksg calls pmruntimegetsync on the host before issuing an SMP command. When that command is itsel...

Linux Distros Unpatched Vulnerability : CVE-2026-118180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or...

Linux Distros Unpatched Vulnerability : CVE-2026-99186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 x86/insn: Simplify foreachinsnprefix made foreachinsnprefix declare its ow...

Linux Distros Unpatched Vulnerability : CVE-2026-117610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that mishandles the XMLTOKNONE token...

Linux Distros Unpatched Vulnerability : CVE-2026-116804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify from 3.4.4 before 3.4.17 contains a SAFEFORTEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-118015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118015 Note that Nessus relies on th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146813 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters When srptallocrwctxs fails partway through a...

Linux Distros Unpatched Vulnerability : CVE-2026-99170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e...

MiracleLinux 8 : libreswan-4.12-2.el8_10.7 (AXSA:2026-2190:04)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2190:04 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Linux Distros Unpatched Vulnerability : CVE-2026-117927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-116273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146903 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtrendpointpost qrtrendpointpost validates an incoming...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146690 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded...

Linux Distros Unpatched Vulnerability : CVE-2026-99192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on...

Linux Distros Unpatched Vulnerability : CVE-2026-99125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttle...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146667 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hidsensorcustomaddattributes create...

Linux Distros Unpatched Vulnerability : CVE-2026-118311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Oracle Linux 8 : gcc-toolset-15-gcc (ELSA-2026-90915)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90915 advisory. 15.2.1-7.2 - fix CVE-2026-102010, PR libstdc++/127656 RHEL-272113 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-117903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir...

Fedora 43 : stargz-snapshotter (2026-75361a79cf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-75361a79cf advisory. Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on...

Linux Distros Unpatched Vulnerability : CVE-2026-99111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix data corruption with concurrent writes and OTRUNC cifsdotruncate flushes dirty pages with filemapwriteandwait and truncates the file on the...

Linux Distros Unpatched Vulnerability : CVE-2026-81039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth host pre-allocates a btconn object a reservation from the fixed aclconns pool for every connectable advertising set it starts, in leadvstartaddcon...

Fedora 44 : util-linux (2026-7f54b8305d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f54b8305d advisory. Upgrade to upstream release v2.41.6 for security-related changes. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : libinstpatch (2026-7f1bcc426b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f1bcc426b advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

Oracle Linux 8 : libXi (ELSA-2026-91268)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91268 advisory. 1.7.10-2 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1793210765)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793210765 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

Linux Distros Unpatched Vulnerability : CVE-2026-116688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit versio...

Fedora 43 : util-linux (2026-b7a077a212)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7a077a212 advisory. Upgrade to upstream release v2.41.6 with security-related patches. Tenable has extracted the preceding description block directly from the Fedora...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146869)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146869 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146248 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Linux Distros Unpatched Vulnerability : CVE-2024-58399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b2731 contains an out-of-bounds read vulnerability in llamamodelloader that allows attackers to read memory outside the mapped model file via...

Linux Distros Unpatched Vulnerability : CVE-2026-118356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-117930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: free the sbi after a grace period If the nocase mount option ntfs3 uses custom hash and dentry compare functions. Both access ntfs3 superblock private...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146836 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table ro...

Linux Distros Unpatched Vulnerability : CVE-2026-118176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146823)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146823 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind...

Linux Distros Unpatched Vulnerability : CVE-2026-99157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: bsg: Pass replylen to bsgsetupqueue to fit UFS ARPMB replies bsg-lib allocates a 96-byte SCSISENSEBUFFERSIZE reply buffer per job, but struct ufsrpmbreply...

Linux Distros Unpatched Vulnerability : CVE-2026-118327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146626 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146640 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinxdma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146646)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146646 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rspinfolen to avoid OOB sense-data read In qla2x00statusentry, the FWI2...

AlmaLinux 10 : emacs (ALSA-2026:90887)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90887 advisory. emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 Tenable has extracted the preceding description block directly from the AlmaLinux...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146660 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sonyinputconfigured adds some controllers to...

Linux Distros Unpatched Vulnerability : CVE-2026-99115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fill in FileSysIdentifier in FSPOSIXINFORMATION smb2getinfofilesystem reports 56 bytes for FSPOSIXINFORMATION, that is the whole of FILESYSTEMPOSIXINFO,...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89860)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689860 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via intege...