The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6243 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6243-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 01, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-53228 CVE-2023-53510 CVE-2023-53545 CVE-2024-47736                      CVE-2024-47809 CVE-2024-49998 CVE-2024-50298 CVE-2024-56719                      CVE-2025-21676 CVE-2025-21682 CVE-2025-37945 CVE-2025-37980                      CVE-2025-38105 CVE-2025-38162 CVE-2025-38192 CVE-2025-38250                      CVE-2025-38303 CVE-2025-38436 CVE-2025-38626 CVE-2025-38659                      CVE-2025-38704 CVE-2025-39748 CVE-2025-39764 CVE-2025-39863                      CVE-2025-40005 CVE-2025-40016 CVE-2025-40135 CVE-2025-40219                      CVE-2025-40242 CVE-2025-40261 CVE-2025-40358 CVE-2025-68206                      CVE-2025-68239 CVE-2025-68265 CVE-2025-71067 CVE-2025-71161                      CVE-2025-71221 CVE-2025-71265 CVE-2025-71266 CVE-2025-71267                      CVE-2025-71269 CVE-2026-23100 CVE-2026-23113 CVE-2026-23141                      CVE-2026-23154 CVE-2026-23157 CVE-2026-23204 CVE-2026-23227                      CVE-2026-23231 CVE-2026-23242 CVE-2026-23243 CVE-2026-23245                      CVE-2026-23253 CVE-2026-23270 CVE-2026-23271 CVE-2026-23273                      CVE-2026-23274 CVE-2026-23277 CVE-2026-23279 CVE-2026-23281                      CVE-2026-23284 CVE-2026-23286 CVE-2026-23287 CVE-2026-23289                      CVE-2026-23290 CVE-2026-23291 CVE-2026-23292 CVE-2026-23293                      CVE-2026-23296 CVE-2026-23298 CVE-2026-23300 CVE-2026-23303                      CVE-2026-23304 CVE-2026-23306 CVE-2026-23307 CVE-2026-23312                      CVE-2026-23315 CVE-2026-23317 CVE-2026-23318 CVE-2026-23319                      CVE-2026-23321 CVE-2026-23324 CVE-2026-23335 CVE-2026-23336                      CVE-2026-23339 CVE-2026-23340 CVE-2026-23343 CVE-2026-23351                      CVE-2026-23352 CVE-2026-23356 CVE-2026-23357 CVE-2026-23359                      CVE-2026-23362 CVE-2026-23364 CVE-2026-23365 CVE-2026-23367                      CVE-2026-23368 CVE-2026-23370 CVE-2026-23372 CVE-2026-23378                      CVE-2026-23379 CVE-2026-23381 CVE-2026-23382 CVE-2026-23388                      CVE-2026-23391 CVE-2026-23392 CVE-2026-23395 CVE-2026-23396                      CVE-2026-23397 CVE-2026-23398 CVE-2026-23401 CVE-2026-23414                      CVE-2026-23420 CVE-2026-23422 CVE-2026-23426 CVE-2026-23428                      CVE-2026-23434 CVE-2026-23438 CVE-2026-23439 CVE-2026-23446                      CVE-2026-23449 CVE-2026-23450 CVE-2026-23452 CVE-2026-23454                      CVE-2026-23455 CVE-2026-23456 CVE-2026-23457 CVE-2026-23458                      CVE-2026-23460 CVE-2026-23462 CVE-2026-23463 CVE-2026-23474                      CVE-2026-23475 CVE-2026-31389 CVE-2026-31391 CVE-2026-31392                      CVE-2026-31393 CVE-2026-31396 CVE-2026-31399 CVE-2026-31400                      CVE-2026-31402 CVE-2026-31403 CVE-2026-31405 CVE-2026-31408                      CVE-2026-31409 CVE-2026-31411 CVE-2026-31412 CVE-2026-31414                      CVE-2026-31415 CVE-2026-31416 CVE-2026-31417 CVE-2026-31418                      CVE-2026-31421 CVE-2026-31422 CVE-2026-31423 CVE-2026-31424                      CVE-2026-31425 CVE-2026-31426 CVE-2026-31427 CVE-2026-31428                      CVE-2026-31431 CVE-2026-31433 CVE-2026-31434 CVE-2026-31441                      CVE-2026-31446 CVE-2026-31447 CVE-2026-31448 CVE-2026-31450                      CVE-2026-31452 CVE-2026-31453 CVE-2026-31454 CVE-2026-31455                      CVE-2026-31464 CVE-2026-31466 CVE-2026-31467 CVE-2026-31469                      CVE-2026-31473 CVE-2026-31476 CVE-2026-31477 CVE-2026-31478                      CVE-2026-31480 CVE-2026-31483 CVE-2026-31485 CVE-2026-31492                      CVE-2026-31494 CVE-2026-31495 CVE-2026-31496 CVE-2026-31497                      CVE-2026-31498 CVE-2026-31503 CVE-2026-31504 CVE-2026-31507                      CVE-2026-31508 CVE-2026-31509 CVE-2026-31510 CVE-2026-31512                      CVE-2026-31515 CVE-2026-31518 CVE-2026-31519 CVE-2026-31520                      CVE-2026-31521 CVE-2026-31522 CVE-2026-31523 CVE-2026-31524                      CVE-2026-31533 CVE-2026-31540 CVE-2026-31545 CVE-2026-31546                      CVE-2026-31548 CVE-2026-31549 CVE-2026-31550 CVE-2026-31551                      CVE-2026-31552 CVE-2026-31555 CVE-2026-31563 CVE-2026-31565                      CVE-2026-31566 CVE-2026-31570 CVE-2026-31628 CVE-2026-31634                      CVE-2026-31649 CVE-2026-31651 CVE-2026-31656 CVE-2026-31657                      CVE-2026-31658 CVE-2026-31659 CVE-2026-31660 CVE-2026-31661                      CVE-2026-31662 CVE-2026-31664 CVE-2026-31665 CVE-2026-31667                      CVE-2026-31668 CVE-2026-31669 CVE-2026-31670 CVE-2026-31671                      CVE-2026-31672 CVE-2026-31674 CVE-2026-31678 CVE-2026-31679                      CVE-2026-31680 CVE-2026-31682 CVE-2026-31683 CVE-2026-31689                      CVE-2026-31695 CVE-2026-31720 CVE-2026-31721 CVE-2026-31726                      CVE-2026-31728 CVE-2026-31737 CVE-2026-31738 CVE-2026-31747                      CVE-2026-31748 CVE-2026-31749 CVE-2026-31751 CVE-2026-31752                      CVE-2026-31754 CVE-2026-31755 CVE-2026-31756 CVE-2026-31758                      CVE-2026-31759 CVE-2026-31761 CVE-2026-31762 CVE-2026-31763                      CVE-2026-31768 CVE-2026-31770 CVE-2026-31773 CVE-2026-31776                      CVE-2026-31778 CVE-2026-31779 CVE-2026-31780 CVE-2026-31781                      CVE-2026-31786 CVE-2026-31787 CVE-2026-31788 CVE-2026-43011                      CVE-2026-43013 CVE-2026-43014 CVE-2026-43015 CVE-2026-43017                      CVE-2026-43018 CVE-2026-43020 CVE-2026-43023 CVE-2026-43024                      CVE-2026-43025 CVE-2026-43026 CVE-2026-43027 CVE-2026-43028                      CVE-2026-43030 CVE-2026-43032 CVE-2026-43033 CVE-2026-43035                      CVE-2026-43037 CVE-2026-43038 CVE-2026-43040 CVE-2026-43041                      CVE-2026-43043 CVE-2026-43046 CVE-2026-43047 CVE-2026-43050                      CVE-2026-43051 CVE-2026-43054 CVE-2026-43057

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.170-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat A use-after-free / refcount underflow     is possible when the heartbeat worker and intel_engine_park_heartbeat() race to release the same     engine->heartbeat.systole request. The heartbeat worker reads engine->heartbeat.systole and calls     i915_request_put() on it when the request is complete, but clears the pointer in a separate, non-atomic     step. Concurrently, a request retirement on another CPU can drop the engine wakeref to zero, triggering
    __engine_park() -> intel_engine_park_heartbeat(). If the heartbeat timer is pending at that point,     cancel_delayed_work() returns true and intel_engine_park_heartbeat() reads the stale non-NULL systole     pointer and calls i915_request_put() on it again, causing a refcount underflow: ``` <4> [487.221889]     Workqueue: i915-unordered engine_retire [i915] <4> [487.222640] RIP: 0010:refcount_warn_saturate+0x68/0xb0     ... <4> [487.222707] Call Trace: <4> [487.222711] <TASK> <4> [487.222716]     intel_engine_park_heartbeat.part.0+0x6f/0x80 [i915] <4> [487.223115] intel_engine_park_heartbeat+0x25/0x40     [i915] <4> [487.223566] __engine_park+0xb9/0x650 [i915] <4> [487.223973]
    ____intel_wakeref_put_last+0x2e/0xb0 [i915] <4> [487.224408] __intel_wakeref_put_last+0x72/0x90 [i915] <4>     [487.224797] intel_context_exit_engine+0x7c/0x80 [i915] <4> [487.225238] intel_context_exit+0xf1/0x1b0     [i915] <4> [487.225695] i915_request_retire.part.0+0x1b9/0x530 [i915] <4> [487.226178]     i915_request_retire+0x1c/0x40 [i915] <4> [487.226625] engine_retire+0x122/0x180 [i915] <4> [487.227037]     process_one_work+0x239/0x760 <4> [487.227060] worker_thread+0x200/0x3f0 <4> [487.227068] ?
    __pfx_worker_thread+0x10/0x10 <4> [487.227075] kthread+0x10d/0x150 <4> [487.227083] ?
    __pfx_kthread+0x10/0x10 <4> [487.227092] ret_from_fork+0x3d4/0x480 <4> [487.227099] ?
    __pfx_kthread+0x10/0x10 <4> [487.227107] ret_from_fork_asm+0x1a/0x30 <4> [487.227141] </TASK> ``` Fix this     by replacing the non-atomic pointer read + separate clear with xchg() in both racing paths. xchg() is a     single indivisible hardware instruction that atomically reads the old pointer and writes NULL. This     guarantees only one of the two concurrent callers obtains the non-NULL pointer and performs the put, the     other gets NULL and skips it. (cherry picked from commit 13238dc0ee4f9ab8dafa2cca7295736191ae2f42)     (CVE-2026-31656)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2195-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
    - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache     (bsc#1264013).
    - CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
    - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
    - CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
    - CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
    - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
    - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
    - CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
    - CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
    - CVE-2026-23461: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).
    - CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
    - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
    - CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
    - CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold     (bsc#1261797).
    - CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()     (bsc#1262602).
    - CVE-2026-31470: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665).
    - CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
    - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263093).
    - CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer     (bsc#1263095).
    - CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in     l2cap_ecred_data_rcv()       (bsc#1262734).
    - CVE-2026-31528: perf: Make sure to use pmu_ctx->pmu for groups (bsc#1263001).
    - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
    - CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
    - CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
    - CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
    - CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
    - CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
    - CVE-2026-31622: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (bsc#1263797).
    - CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
    - CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
    - CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
    - CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
    - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
    - CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
    - CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
    - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
    - CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
    - CVE-2026-46331: kernel: net/sched: fix pedit partial COW leading to page cache
    - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
    - CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
    - CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
    - CVE-2026-43044: crypto: caam - fix DMA corruption on long hmac keys (bsc#1264087).
    - CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
    - CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
    - CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr.
    - CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
    - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
    - CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).
    - CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).
    - CVE-2026-43330: crypto: caam - fix overflow on long hmac keys (bsc#1264801).
    - CVE-2026-43334: Bluetooth: SMP: force responder MITM requirements before building the pairing response     (bsc#1265090).
    - CVE-2026-43365: xfs: fix undersized l_iclog_roundoff values (bsc#1265119).
    - CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).
    - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126).
    - CVE-2026-43494: net/rds: reset op_nents when zerocopy page pin fails (bsc#1265626).

    The following non security issues were fixed:

    - btrfs: reject root items with drop_progress and zero drop_level (git-fixes).
    - btrfs: replace BUG() with error handling in __btrfs_balance() (git-fixes).
    - check-for-config-changes: Exclude CC_MS_EXTENSIONS.
    - check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}.
    - dm init: ensure device probing has finished in dm-mod.waitfor= (git-fixes).
    - hv_sock: fix ARM64 support (git-fixes).
    - ice: set max queues in alloc_etherdev_mqs() (git-fixes).
    - kdump, documentation: describe craskernel CMA reservation (jsc#PED-7249).
    - mkspec: Add signature to source list only when it exists.
    - net/rds: reset op_nents when zerocopy page pin fails (bsc#1265626).
    - net/sched: fix pedit partial COW leading to page cache corruption (bsc#1265421).
    - net: mana: Add MAC address to vPort logs and clarify error messages (git-fixes).
    - net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() (git-fixes).
    - net: mana: Don't overwrite port probe error with add_adev result (git-fixes).
    - net: mana: Fix crash from unvalidated SHM offset read from BAR0 during FLR (bsc#1265846).
    - net: mana: Fix EQ leak in mana_remove on NULL port (git-fixes).
    - net: mana: Fix RX skb truesize accounting (bsc#1248754).
    - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (git-fixes).
    - net: mana: Guard mana_remove against double invocation (git-fixes).
    - net: mana: hardening: Validate adapter_mtu from MANA_QUERY_DEV_CONFIG (git-fixes).
    - net: mana: hardening: Validate doorbell ID from GDMA_REGISTER_DEVICE response (git-fixes).
    - net: mana: Init gf_stats_work before potential error paths in probe (git-fixes).
    - net: mana: Init link_change_work before potential error paths in probe (git-fixes).
    - net: mana: remove double CQ cleanup in mana_create_rxq error path (git-fixes).
    - net: mana: Set default number of queues to 16 (bsc#1261648).
    - net: mana: Skip WQ object destruction for uninitialized RXQ (git-fixes).
    - net: mana: Use at least SZ_4K in doorbell ID range check (git-fixes).
    - net: mana: Use pci_name() for debugfs directory naming (git-fixes).
    - ocfs2: fix possible deadlock between unlink and dio_end_io_write (bsc#1258718).
    - ocfs2: split transactions in dio completion to avoid credit exhaustion (bsc#1258718).
    - PCI: hv: Set default NUMA node to 0 for devices without affinity info (git-fixes).
    - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (git-fixes).
    - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() (git-fixes).
    - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (git-fixes).
    - RDMA/mana: Validate rx_hash_key_len (git-fixes).
    - RDMA/mana_ib: cleanup the usage of mana_gd_send_request() (git-fixes).
    - RDMA/mana_ib: Disable RX steering on RSS QP destroy (git-fixes).
    - RDMA/mana_ib: Support memory windows (git-fixes).
    - sched/balancing: Switch the 'DEFINE_SPINLOCK(balancing)' spinlock into an 'atomic_t     sched_balance_running' flag       (bsc#1253754).
    - sched/fair: Change likelyhood of nohz.nr_cpus (bsc#1234634 bsc#1258961).
    - sched/fair: Have SD_SERIALIZE affect newidle balancing (bsc#1253754).
    - sched/fair: Move checking for nohz cpus after time check (bsc#1234634 bsc#1258961).
    - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (bsc#1234634 bsc#1258961).
    - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (bsc#1253754).
    - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (git-fixes).
    - scsi: target: iscsi: validate CHAP_R length before base64 decode (bsc#1265449).
    - tty: tty_io: update timestamps on all device nodes (bsc#1262020).
    - virt: tdx-guest: Return error for GetQuote failures (git-fixes).
    - workqueue: Break up enum definitions and give names to the types (bsc#1260522).
    - workqueue: Clean up enum work_bits and related constants (bsc#1260522).
    - workqueue: Factor out work_grab_pending() from __cancel_work_sync() (bsc#1260522).
    - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (bsc#1260522).
    - workqueue: Implement disable/enable for (delayed) work items (bsc#1260522).
    - workqueue: Introduce work_cancel_flags (bsc#1260522).
    - workqueue: Make @flags handling consistent across set_work_data() and friends (bsc#1260522).
    - workqueue: Preserve OFFQ bits in cancel[_sync] paths (bsc#1260522).
    - workqueue: Rename __cancel_work_timer() to __cancel_timer_sync() (bsc#1260522).
    - workqueue: Reorganize flush and cancel[_sync] functions (bsc#1260522).
    - Xarray: do not return sibling entries from xas_find_marked() (bsc#1263815).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2202-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2021-47103: inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1221010).
    - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
    - CVE-2026-23239: espintcp: Fix race condition in espintcp_close() (bsc#1259485).
    - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1259484).
    - CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
    - CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
    - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260522).
    - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
    - CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
    - CVE-2026-23462: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).
    - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).
    - CVE-2026-31403: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).
    - CVE-2026-31408: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold     (bsc#1261797).
    - CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()     (bsc#1262602).
    - CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263085).
    - CVE-2026-31507: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer     (bsc#1263095).
    - CVE-2026-31512: Bluetooth: L2CAP: Validate PDU length before reading SDU length in     l2cap_ecred_data_rcv()       (bsc#1262734).
    - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).
    - CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263065).
    - CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263176).
    - CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
    - CVE-2026-31602: ALSA: ctxfi: Limit PTP to a single page (bsc#1263723).
    - CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (bsc#1263600).
    - CVE-2026-31649: net: stmmac: fix integer underflow in chain mode (bsc#1263582).
    - CVE-2026-31656: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (bsc#1263170).
    - CVE-2026-31662: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (bsc#1263131).
    - CVE-2026-31669: mptcp: fix slab-use-after-free in __inet_lookup_established (bsc#1263141).
    - CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263668).
    - CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263901).
    - CVE-2026-31700: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (bsc#1263882).
    - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).
    - CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (bsc#1262181).
    - CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).
    - CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).
    - CVE-2026-43050: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).
    - CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).
    - CVE-2026-43126: ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1264634).
    - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264848).
    - CVE-2026-43214: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).
    - CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).
    - CVE-2026-43334: Bluetooth: SMP: force responder MITM requirements before building the pairing response     (bsc#1265090).
    - CVE-2026-43365: xfs: fix undersized l_iclog_roundoff values (bsc#1265119).
    - CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126).
    - CVE-2026-43494: net/rds: reset op_nents when zerocopy page pin fails (bsc#1265626).
    - CVE-2026-43500: supported.conf: drop rxrpc and af_kfs (bsc#1264450).
    - CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (bsc#1265960).
    - CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).

    The following non security issues were fixed:

    - check-for-config-changes: Exclude CC_MS_EXTENSIONS.
    - check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}.
    - crypto: qat - fix ring to service map for QAT GEN4 (bsc#1258248).
    - crypto: qat - refactor fw config related functions (bsc#1258248).
    - crypto: qat - use masks for AE groups (bsc#1258248).
    - dm init: ensure device probing has finished in dm-mod.waitfor= (git-fixes).
    - mkspec: Add signature to source list only when it exists.
    - net/rds: reset op_nents when zerocopy page pin fails (bsc#1265626).
    - net: gro: don't merge zcopy skbs (git-fixes).
    - nvmet-rdma: fix possible bad dereference when freeing rsps (bsc#1260983).
    - ocfs2: fix possible deadlock between unlink and dio_end_io_write (bsc#1258718).
    - ocfs2: split transactions in dio completion to avoid credit exhaustion (bsc#1258718).
    - xfrm: esp: avoid in-place decrypt on shared skb frags.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
311547	Debian dsa-6243 : affs-modules-6.1.0-44-4kc-malta-di - security update	Nessus	Debian Local Security Checks	2026/5/2	2026/5/8	high
313511	Photon OS 5.0: Linux PHSA-2026-5.0-0834	Nessus	PhotonOS Local Security Checks	2026/5/9	2026/5/16	high
310316	Linux Distros Unpatched Vulnerability : CVE-2026-31656	Nessus	Misc.	2026/4/25	2026/8/1	high
332448	Photon OS 5.0: Linux PHSA-2026-5.0-92-0830	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/8/5	high
318287	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2195-1)	Nessus	SuSE Local Security Checks	2026/6/3	2026/7/2	high
318286	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2202-1)	Nessus	SuSE Local Security Checks	2026/6/3	2026/6/9	medium

检测

插件搜索

high

high

high

high

high

medium