Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - wifi：ath9k：修复来自固件的 OOB 访问 tx 状态队列 ID ath_tx_edma_tasklet（） 访问 sc->tx.txq[ts.qid]，其中 ts.qid 为 4 位硬件字段 （0-15），但 txq 数组只有ATH9K_NUM_TX_QUEUES （10） 条目。qid >= 10 导致 OOB 数组访问。将 ts.qid 用作数组索引之前，先在 ts.qid 上添加边界检查。（CVE-2026-74408）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-74408

high Nessus 插件 ID 337599

版本 1.18

版本 1.17

版本 1.16

版本 1.15

版本 1.13

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.6

版本 1.5

版本 1.4

版本 1.2

版本 1.1

版本 1.18 Oct 14, 2026, 9:52 AM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202610140952
版本 1.17 Oct 13, 2026, 2:52 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
版本 1.16 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202610121219
版本 1.15 Oct 10, 2026, 5:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610100524
版本 1.13 Oct 9, 2026, 2:01 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
版本 1.11 Oct 8, 2026, 1:30 PM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202610081330
版本 1.10 Oct 7, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070612
版本 1.9 Oct 7, 2026, 12:45 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070045
版本 1.8 Sep 22, 2026, 8:27 AM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202609220827
版本 1.7 Sep 21, 2026, 8:44 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin Feed: 202609212044
版本 1.6 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202608281216
版本 1.5 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
版本 1.4 Aug 21, 2026, 7:41 AM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:C". "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 score" set to 8.3. "CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-74408, severity decreased from "High" to "Medium". based on CVE-2026-74408, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
版本 1.2 Aug 19, 2026, 11:27 AM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-74408, severity increased from "Medium" to "High") Plugin Feed: 202608191127
版本 1.1 Aug 19, 2026, 6:09 AM New Plugin Feed: 202608190609