Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - AppArmor：在no_new_privs測試之前檢查標籤建置 aa_change_profile（） 會在no_new_privs子集檢查之前使用 fn_label_build_in_scope（） 建置取代標籤。組建協助程式可能會失敗，並傳回 NULL 或 ERR_PTR，但在現有的 IS_ERR_OR_NULL（） 檢查之前，結果已傳遞至 aa_label_is_unconfined_subset（）。在建置之後立即重複使用現有的目標標籤建置失敗處理。這會保留目前的稽核處理，同時防止子集協助程式取消參照無效的標籤。（CVE-2026-72460）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - apparmor：在no_new_privs测试前检查标签版本 aa_change_profile（） 在no_new_privs子集检查前使用 fn_label_build_in_scope（） 构建替代标签。构建帮助程序可能失败并返回 NULL 或 ERR_PTR，但在现有 IS_ERR_OR_NULL（） 检查之前，结果已传递给 aa_label_is_unconfined_subset（）。在构建之后立即重复使用现有的目标标签构建失败处理。这可保留当前的审核处理，同时防止子集帮助程序取消引用无效标签。（CVE-2026-72460）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - apparmor:テストno_new_privs前にラベルビルドをチェックします aa_change_profile() は、no_new_privs サブセットチェックの前に fn_label_build_in_scope() で置換ラベルを構築します。ビルドヘルパーは失敗して NULL または ERR_PTR を返すことが可能ですが、結果は既存の IS_ERR_OR_NULL() チェックの前に aa_label_is_unconfined_subset() に渡されました。ビルド直後に既存のターゲットラベルビルド失敗処理を再利用します。これにより、サブセットヘルパーが無効なラベルを逆参照しないようにしながら、現在の監査処理が維持されます。(CVE-2026-72460)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104498 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    apparmor: check label build before no_new_privs test

    aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build     helper can fail and return NULL or an ERR_PTR, but the result was passed     to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()     check.

    Reuse the existing target-label build failure handling immediately after     the build. This preserves the current audit handling while preventing the     subset helper from dereferencing an invalid label.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    apparmor: check label build before no_new_privs test

    aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build     helper can fail and return NULL or an ERR_PTR, but the result was passed     to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()     check.

    Reuse the existing target-label build failure handling immediately after     the build. This preserves the current audit handling while preventing the     subset helper from dereferencing an invalid label.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build helper can fail and return NULL     or an ERR_PTR, but the result was passed to aa_label_is_unconfined_subset() before the existing     IS_ERR_OR_NULL() check. Reuse the existing target-label build failure handling immediately after the     build. This preserves the current audit handling while preventing the subset helper from dereferencing an     invalid label. (CVE-2026-72460)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
337421	Linux Distros 未修補弱點：CVE-2026-72460	Nessus	Misc.	2026/8/18	2026/8/28	high
337421	Linux Distros 未修补的漏洞：CVE-2026-72460	Nessus	Misc.	2026/8/18	2026/8/28	high
337421	Linux Distros のパッチ未適用の脆弱性: CVE-2026-72460	Nessus	Misc.	2026/8/18	2026/8/28	high
341829	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104498)	Nessus	Unity Linux Local Security Checks	2026/8/31	2026/8/31	high
339637	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)	Nessus	Unity Linux Local Security Checks	2026/8/26	2026/8/26	high
337421	Linux Distros Unpatched Vulnerability : CVE-2026-72460	Nessus	Misc.	2026/8/18	2026/8/28	high
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	2026/8/12	2026/9/7	high

检测

插件搜索

high

high

high

high

high

high

high