The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_create_adv_data() builds the     advertising data into a fixed-size buffer (size, 31 for the legacy path). It may prepend a 3-byte     Flags AD structure (LE_AD_NO_BREDR on an LE-only controller) and then copies the per-instance data     without checking that it still fits: memcpy(ptr, adv->adv_data, adv->adv_data_len); tlv_data_max_len()     only reserves those 3 bytes when the user-supplied flags carry a managed-flags bit, so an instance added     with flags == 0 is accepted with adv_data_len up to the full buffer. At advertise time the flags are still     prepended, and the memcpy() writes 3 + adv_data_len bytes into the size-byte buffer: BUG: KASAN: stack-     out-of-bounds in eir_create_adv_data (net/bluetooth/eir.c:301) Write of size 31 at addr ffff88800a547bdc     by task kworker/u9:0/65 Workqueue: hci0 hci_cmd_sync_work __asan_memcpy (mm/kasan/shadow.c:106)     eir_create_adv_data (net/bluetooth/eir.c:301) hci_update_adv_data_sync (net/bluetooth/hci_sync.c:1310)     hci_schedule_adv_instance_sync (net/bluetooth/hci_sync.c:1817) hci_cmd_sync_work     (net/bluetooth/hci_sync.c:332) This frame has 1 object: [32, 64) 'cp' The Flags structure is added by     the kernel, not requested by userspace, so only prepend it when it fits together with the instance     advertising data; when there is no room for both, drop the flags rather than the user-provided data.
    Reachable by a local user with CAP_NET_ADMIN owning an LE-only controller on the legacy advertising path.
    (CVE-2026-64539)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6405 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6405-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 31, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2026-45944 CVE-2026-53005 CVE-2026-53260 CVE-2026-53365                      CVE-2026-63970 CVE-2026-64192 CVE-2026-64206 CVE-2026-64227                      CVE-2026-64286 CVE-2026-64287 CVE-2026-64307 CVE-2026-64341                      CVE-2026-64352 CVE-2026-64361 CVE-2026-64363 CVE-2026-64364                      CVE-2026-64369 CVE-2026-64371 CVE-2026-64375 CVE-2026-64390                      CVE-2026-64401 CVE-2026-64405 CVE-2026-64413 CVE-2026-64416                      CVE-2026-64421 CVE-2026-64428 CVE-2026-64434 CVE-2026-64438                      CVE-2026-64441 CVE-2026-64461 CVE-2026-64462 CVE-2026-64472                      CVE-2026-64481 CVE-2026-64488 CVE-2026-64493 CVE-2026-64507                      CVE-2026-64508 CVE-2026-64509 CVE-2026-64510 CVE-2026-64530                      CVE-2026-64531 CVE-2026-64532 CVE-2026-64533 CVE-2026-64534                      CVE-2026-64535 CVE-2026-64537 CVE-2026-64538 CVE-2026-64539                      CVE-2026-64540 CVE-2026-64541 CVE-2026-64542 CVE-2026-64543                      CVE-2026-64544 CVE-2026-64545 CVE-2026-64546 CVE-2026-64547                      CVE-2026-64548 CVE-2026-64549 CVE-2026-64550 CVE-2026-64551                      CVE-2026-64552 CVE-2026-64553 CVE-2026-64554 CVE-2026-64555                      CVE-2026-64557 CVE-2026-64558 CVE-2026-64559 CVE-2026-64560     Debian Bug     : 1130336

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.100-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
330247	Linux Distros Unpatched Vulnerability : CVE-2026-64539	Nessus	Misc.	2026/7/28	2026/10/14	high
331409	Debian dsa-6405 : ata-modules-6.12.100+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	2026/7/31	2026/9/23	high
365522	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8917-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium

检测

插件搜索

high

high

medium