The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68507 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)

    * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)

    * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)

    * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

    * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)

    * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

    * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)

    * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)

    * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)

    * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)

    * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)

    * kernel: netfilter: handle unreadable frags (CVE-2026-64414)

    * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)

    * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)

    * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)

    * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)

    * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)

    * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)

    * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)

    Bug Fix(es) and Enhancement(s):

    * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0)     returns EBUSY [rhel-10.2.z] (JIRA:RHEL-239776)

    * RHEL 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [rhel-10.2.z]     (JIRA:RHEL-254105)

    * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:RHEL-255225)

    * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:RHEL-255516)

    * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:RHEL-255518)

    * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:RHEL-255519)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68507 advisory.

    * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)

    * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)

    * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)

    * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

    * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)

    * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

    * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)

    * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)

    * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)

    * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)

    * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)

    * kernel: netfilter: handle unreadable frags (CVE-2026-64414)

    * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)

    * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)

    * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)

    * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)

    * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)

    * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)

    * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)

    Bug Fix(es) and Enhancement(s):

    * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0)     returns EBUSY [rhel-10.2.z] (JIRA:Rocky Linux-239776)

    * Rocky Linux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [rhel-10.2.z]     (JIRA:Rocky Linux-254105)

    * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:Rocky Linux-255225)

    * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:Rocky Linux-255516)

    * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:Rocky Linux-255518)

    * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:Rocky Linux-255519)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68570 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)

    * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)

    * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

    * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

    * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)

    * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)

    * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

    * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)

    * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)

    * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

    * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

    * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)

    * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

    * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

    * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check     (CVE-2026-63913)

    * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)

    * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174)

    * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)

    * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)

    * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)

    * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)

    * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)

    * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

    * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)

    * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)

    * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003)

    * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)

    Bug Fix(es) and Enhancement(s):

    * gfs2: filesystem withdrawal rework [rhel-9.8.z] (JIRA:RHEL-252540)

    * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [rhel-9.8.z]     (JIRA:RHEL-252544)

    * gfs2: Get rid of sd_async_glock_wait [rhel-9.8.z] (JIRA:RHEL-253986)

    * [RHEL9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:RHEL-255217)

    * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [rhel-9.8.z]     (JIRA:RHEL-256733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68570 advisory.

    * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)

    * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)

    * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

    * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

    * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)

    * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)

    * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

    * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)

    * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)

    * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

    * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

    * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)

    * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

    * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

    * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check     (CVE-2026-63913)

    * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)

    * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174)

    * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)

    * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)

    * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)

    * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)

    * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)

    * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

    * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)

    * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)

    * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003)

    * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)

    Bug Fix(es) and Enhancement(s):

    * gfs2: filesystem withdrawal rework [rhel-9.8.z] (JIRA:Rocky Linux-252540)

    * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [rhel-9.8.z] (JIRA:Rocky     Linux-252544)

    * gfs2: Get rid of sd_async_glock_wait [rhel-9.8.z] (JIRA:Rocky Linux-253986)

    * [Rocky Linux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:Rocky     Linux-255217)

    * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [rhel-9.8.z]     (JIRA:Rocky Linux-256733)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8802-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - Compute Acceleration Framework;

    - Drivers core;

    - Bluetooth drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - EFI core;

    - GPU drivers;

    - Hardware monitoring drivers;

    - InfiniBand drivers;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - SCSI subsystem;

    - SPI subsystem;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - File systems infrastructure;

    - Software nodes and device properties;

    - Bluetooth subsystem;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - IRQ subsystem;

    - KProbes tracing;

    - Memory management;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Multipath TCP;

    - Phonet protocol;

    - SMC sockets;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - Key management;

    - Linux Security Modules (LSM) Framework;

    - ALSA framework;

    - AudioScience HPI driver; (CVE-2025-71289, CVE-2026-23469, CVE-2026-31420, CVE-2026-31486,     CVE-2026-31506, CVE-2026-31560, CVE-2026-46158, CVE-2026-46170, CVE-2026-46275, CVE-2026-46315,     CVE-2026-52912, CVE-2026-52915, CVE-2026-52916, CVE-2026-52918, CVE-2026-52919, CVE-2026-52921,     CVE-2026-52922, CVE-2026-52926, CVE-2026-52941, CVE-2026-53357, CVE-2026-64015, CVE-2026-64018,     CVE-2026-64025, CVE-2026-64029, CVE-2026-64032, CVE-2026-64033, CVE-2026-64034, CVE-2026-64039,     CVE-2026-64046, CVE-2026-64047, CVE-2026-64048, CVE-2026-64051, CVE-2026-64055, CVE-2026-64056,     CVE-2026-64064, CVE-2026-64073, CVE-2026-64083, CVE-2026-64084, CVE-2026-64085, CVE-2026-64086,     CVE-2026-64087, CVE-2026-64088, CVE-2026-64089, CVE-2026-64092, CVE-2026-64096, CVE-2026-64097,     CVE-2026-64098, CVE-2026-64102, CVE-2026-64103, CVE-2026-64106, CVE-2026-64108, CVE-2026-64109,     CVE-2026-64111, CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64118,     CVE-2026-64121, CVE-2026-64125, CVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64133,     CVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137, CVE-2026-64138, CVE-2026-64144,     CVE-2026-64147, CVE-2026-64148, CVE-2026-64153, CVE-2026-64155, CVE-2026-64163, CVE-2026-64165,     CVE-2026-64166, CVE-2026-64168, CVE-2026-64170, CVE-2026-64173, CVE-2026-64174, CVE-2026-64177,     CVE-2026-64178, CVE-2026-64179, CVE-2026-64180, CVE-2026-64182, CVE-2026-64183, CVE-2026-64184,     CVE-2026-64185, CVE-2026-64214, CVE-2026-64217, CVE-2026-64218, CVE-2026-64219, CVE-2026-64220,     CVE-2026-64221, CVE-2026-64225, CVE-2026-64231, CVE-2026-64518)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68507 advisory.

    - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari)     [RHEL-241004] {CVE-2026-68363}
    - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175}
    - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363]     {CVE-2026-64176}
    - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528]     {CVE-2026-23172}
    - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari)     [RHEL-246405] {CVE-2026-63869}
    - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041]     {CVE-2026-72045}
    - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041]     {CVE-2026-63923}
    - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953]     {CVE-2026-72102}
    - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018]     {CVE-2026-68143}
    - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243]     {CVE-2026-68294}
    - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211]     {CVE-2026-68128}
    - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201]     {CVE-2026-68200}
    - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414}
    - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631]     {CVE-2026-52971}
    - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192}
    - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727]     {CVE-2026-64029}
    - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086]     {CVE-2026-53193}
    - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193}
    - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748]     {CVE-2026-64456}
    - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611]     {CVE-2026-53176}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68507 advisory.

    * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
      * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)
      * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)
      * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
      * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)
      * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
      * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)
      * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)
      * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)
      * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)
      * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)
      * kernel: netfilter: handle unreadable frags (CVE-2026-64414)
      * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)
      * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)
      * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change     (CVE-2026-68143)
      * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)
      * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)
      * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)
      * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)


    Bug Fix(es) and Enhancement(s):

      * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0)     returns EBUSY [almalinux-10.2.z] (JIRA:AlmaLinux-239776)
      * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-10.2.z]     (JIRA:AlmaLinux-254105)
      * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:AlmaLinux-255225)
      * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:AlmaLinux-255516)
      * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:AlmaLinux-255518)
      * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:AlmaLinux-255519)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8761-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - Compute Acceleration Framework;

    - Drivers core;

    - Bluetooth drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - EFI core;

    - GPU drivers;

    - Hardware monitoring drivers;

    - InfiniBand drivers;

    - Network drivers;

    - SCSI subsystem;

    - SPI subsystem;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - File systems infrastructure;

    - Software nodes and device properties;

    - Bluetooth subsystem;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - IRQ subsystem;

    - KProbes tracing;

    - Memory management;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Multipath TCP;

    - Phonet protocol;

    - SMC sockets;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - Key management;

    - Linux Security Modules (LSM) Framework;

    - ALSA framework;

    - AudioScience HPI driver; (CVE-2025-71289, CVE-2026-23469, CVE-2026-31420, CVE-2026-31486,     CVE-2026-31560, CVE-2026-46158, CVE-2026-46170, CVE-2026-46275, CVE-2026-46315, CVE-2026-52912,     CVE-2026-52915, CVE-2026-52916, CVE-2026-52918, CVE-2026-52919, CVE-2026-52921, CVE-2026-52922,     CVE-2026-52926, CVE-2026-52941, CVE-2026-53357, CVE-2026-64015, CVE-2026-64025, CVE-2026-64029,     CVE-2026-64032, CVE-2026-64033, CVE-2026-64039, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048,     CVE-2026-64051, CVE-2026-64055, CVE-2026-64056, CVE-2026-64064, CVE-2026-64073, CVE-2026-64083,     CVE-2026-64084, CVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088, CVE-2026-64089,     CVE-2026-64092, CVE-2026-64096, CVE-2026-64097, CVE-2026-64098, CVE-2026-64102, CVE-2026-64103,     CVE-2026-64106, CVE-2026-64108, CVE-2026-64109, CVE-2026-64111, CVE-2026-64113, CVE-2026-64114,     CVE-2026-64115, CVE-2026-64116, CVE-2026-64118, CVE-2026-64121, CVE-2026-64125, CVE-2026-64126,     CVE-2026-64127, CVE-2026-64128, CVE-2026-64133, CVE-2026-64134, CVE-2026-64135, CVE-2026-64136,     CVE-2026-64137, CVE-2026-64138, CVE-2026-64144, CVE-2026-64147, CVE-2026-64148, CVE-2026-64153,     CVE-2026-64155, CVE-2026-64163, CVE-2026-64165, CVE-2026-64166, CVE-2026-64168, CVE-2026-64170,     CVE-2026-64173, CVE-2026-64174, CVE-2026-64177, CVE-2026-64178, CVE-2026-64179, CVE-2026-64180,     CVE-2026-64182, CVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64214, CVE-2026-64217,     CVE-2026-64218, CVE-2026-64219, CVE-2026-64220, CVE-2026-64221, CVE-2026-64225, CVE-2026-64231,     CVE-2026-64518)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
346922	RHEL 10 : kernel (RHSA-2026:68507)	Nessus	Red Hat Local Security Checks	2026/9/17	2026/9/17	high
348576	RockyLinux 10 : kernel (RLSA-2026:68507)	Nessus	Rocky Linux Local Security Checks	2026/9/21	2026/9/21	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	2026/9/7	2026/9/23	high
346915	RHEL 9 : kernel (RHSA-2026:68570)	Nessus	Red Hat Local Security Checks	2026/9/17	2026/9/17	medium
348577	RockyLinux 9 : kernel (RLSA-2026:68570)	Nessus	Rocky Linux Local Security Checks	2026/9/21	2026/9/21	medium
349264	Ubuntu 22.04 LTS / 24.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8802-1)	Nessus	Ubuntu Local Security Checks	2026/9/23	2026/9/23	high
348157	Oracle Linux 10 : kernel (ELSA-2026-68507)	Nessus	Oracle Linux Local Security Checks	2026/9/18	2026/9/18	high
348288	AlmaLinux 10 : kernel (ALSA-2026:68507)	Nessus	Alma Linux Local Security Checks	2026/9/19	2026/9/19	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	2026/8/26	2026/9/23	high
333944	Photon OS 5.0: Linux PHSA-2026-5.0-92-0864	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/24	high
346236	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8761-1)	Nessus	Ubuntu Local Security Checks	2026/9/16	2026/9/16	high
347900	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4254-1)	Nessus	SuSE Local Security Checks	2026/9/18	2026/9/23	high

检测

插件搜索

high

high

high

medium

medium

high

high

high

high

high

high

high