The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a36bdff8d7 advisory.

    Update to 1.164.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc2cbc1bc8 advisory.

    Automatic update for containerd-2.3.2-1.fc45.

    ##### **Changelog**

    ```
    * Fri Jun 26 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.2-1
    - Update to release v2.3.2
    - Resolves: rhbz#2464270
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    - Resolves CVE-2026-50195
    - Resolves CVE-2026-53488
    - Resolves CVE-2026-53492
    - Resolves CVE-2026-53489
    - Resolves CVE-2026-47262
    - Upstream fixes
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.1-1
    - Update to release v2.3.1
    - Resolves: rhbz#2464270
    - Upstream feature enhancements and fixes
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-2
    - Build shim as static-pie
    - Build shim as static using static-pie to retain pie benefits and static       build. See https://github.com/containerd/containerd/discussions/13340#dis       cussioncomment-16883392 for additional information.
    * Fri May  1 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-1
    - Update to release v2.3.0
    - Refreshed spec file using go2rpm
    - Build now using gobuild macro for most binaries.
    - 'go build' is used for containerd-shim-runc-v2 to emulate makefile static       build

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI     implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted     checkpoint image metadata during container restoration. When restoring a container from a checkpoint,     containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the     pod's create-time specification. This allows a user with pod creation permissions to bypass standard     Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as     device nodes and host mounts) into the restored container. Successful exploitation requires that the node     has CDI enabled and contains a matching host CDI specification for the requested device; environments     where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been     fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-53492)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Containerd on the remote host is 2.1.x prior to 2.1.9, 2.2.x prior to 2.2.5, or 2.3.x prior to 2.3.2.
It is, therefore, affected by multiple vulnerabilities:

  - containerd's CRI checkpoint import process contains a vulnerability where it fails to validate the image     references specified within a checkpoint image's configuration. An attacker with permissions to create pods can     use a crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local     tag, thereby poisoning the node's local image cache. (CVE-2026-50195)

  - A bug was found in containerd where the CRI plugin restores container.log from a checkpoint image without     validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs.
    (CVE-2026-53489)

  - containerd's CRI implementation improperly trusts Container Device Interface (CDI) annotations found within     untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint,     containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's     create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes     resource allocation and device plugin enforcement, injecting arbitrary CDI edits into the restored container.
    (CVE-2026-53492)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8472-1 advisory.

    It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could     possibly use this issue to cause containerd to enter an infinite loop, resulting in a denial of service.
    (CVE-2026-33814)

    Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly handled group parsing when creating     containers from images. An attacker could possibly use this issue to cause containerd to consume excessive     memory, resulting in a denial of service. (CVE-2026-47262)

    Henry Beberman and Robert Prast discovered that containerd incorrectly validated image references when     importing container checkpoints. An attacker could possibly use this issue to poison the local image cache     and execute arbitrary code in other pods. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,     Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-50195)

    Robert Prast discovered that containerd incorrectly propagated labels from image configurations to     containers. An attacker could possibly use this issue to execute arbitrary code on the host.
    (CVE-2026-53488)

    Yuming Zhang, Song Li, Sangwon Ryu, Henry Beberman, Robert Prast, Kyle Elliott and Zhenchen Wang     discovered that containerd incorrectly validated symlinked paths when restoring container checkpoints. An     attacker could possibly use this issue to read arbitrary files on the host, resulting in information     disclosure. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10 and Ubuntu 26.04     LTS. (CVE-2026-53489)

    Robert Prast discovered that containerd incorrectly trusted device interface annotations when restoring     container checkpoints. An attacker could possibly use this issue to bypass resource allocation     restrictions and inject devices or host mounts into a container. This issue only affected Ubuntu 22.04     LTS, Ubuntu 24.04 LTS, Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory.

    Automatic update for docker-buildx-0.36.0-1.fc45.

    ##### **Changelog**

    ```
    * Wed Jul 29 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 0.36.0-1
    - Update to release v0.36.0
    - Resolves: rhbz#2506339
    - Upstream new features and fixes
    - Resolves CVE-2026-53492 - rhbz#2496553
    - Resolves CVE-2026-47262 - rhbz#2496436

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
332078	Fedora 43 : doctl (2026-a36bdff8d7)	Nessus	Fedora Local Security Checks	2026/8/4	2026/8/4	high
323660	Fedora 45 : containerd (2026-dc2cbc1bc8)	Nessus	Fedora Local Security Checks	2026/6/29	2026/7/7	critical
321804	Linux Distros Unpatched Vulnerability : CVE-2026-53492	Nessus	Misc.	2026/6/20	2026/8/25	high
322408	Containerd 2.1.x < 2.1.9 / 2.2.x < 2.2.5 / 2.3.x < 2.3.2 Multiple Vulnerabilities	Nessus	Misc.	2026/6/24	2026/7/3	high
322949	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : containerd vulnerabilities (USN-8472-1)	Nessus	Ubuntu Local Security Checks	2026/6/26	2026/7/8	critical
330763	Fedora 45 : docker-buildx (2026-c37317fdde)	Nessus	Fedora Local Security Checks	2026/7/29	2026/7/29	high

检测

插件搜索

high

critical

high

high

critical

high