The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in     dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those entries do not own a reference,     because the iterator drops the previous device reference on each step. The cached pointer is then     dereferenced later when handling OCTEON_VF_FLR_REQUEST. Replace the cached VF mapping with runtime lookup     on the mailbox DPI ring: derive the VF index from q_no, resolve the VF via exported PCI IOV helpers,     validate it with the PF pointer and VF ID, then issue pcie_flr() and drop the reference with     pci_dev_put(). Remove the unused VF lookup table initialization and cleanup. (CVE-2026-72329)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8816-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - S390 architecture;

    - x86 architecture;

    - DRBD Distributed Replicated Block Device drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - TCM subsystem;

    - Virtio Host (VHOST) subsystem;

    - Xen hypervisor drivers;

    - AFS file system;

    - File systems infrastructure;

    - Network file systems library;

    - Network file system (NFS) client;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - SMB network file system;

    - IPv4 networking;

    - Sun RPC protocol;

    - IPv6 networking;

    - IP tunnels definitions;

    - Netfilter;

    - TCP network protocol;

    - Locking primitives;

    - 9P file system network protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Networking core;

    - IFE protocol;

    - RxRPC session sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - TIPC protocol;

    - XFRM subsystem; (CVE-2026-64530, CVE-2026-64534, CVE-2026-64535, CVE-2026-64541, CVE-2026-64551,     CVE-2026-68083, CVE-2026-68457, CVE-2026-68476, CVE-2026-68477, CVE-2026-72014, CVE-2026-72020,     CVE-2026-72033, CVE-2026-72041, CVE-2026-72046, CVE-2026-72064, CVE-2026-72065, CVE-2026-72069,     CVE-2026-72083, CVE-2026-72084, CVE-2026-72085, CVE-2026-72098, CVE-2026-72129, CVE-2026-72130,     CVE-2026-72137, CVE-2026-72139, CVE-2026-72191, CVE-2026-72192, CVE-2026-72194, CVE-2026-72217,     CVE-2026-72220, CVE-2026-72221, CVE-2026-72222, CVE-2026-72226, CVE-2026-72234, CVE-2026-72248,     CVE-2026-72249, CVE-2026-72251, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279, CVE-2026-72287,     CVE-2026-72288, CVE-2026-72289, CVE-2026-72296, CVE-2026-72299, CVE-2026-72317, CVE-2026-72318,     CVE-2026-72319, CVE-2026-72320, CVE-2026-72322, CVE-2026-72323, CVE-2026-72329, CVE-2026-72339,     CVE-2026-72348, CVE-2026-72351, CVE-2026-72355, CVE-2026-72366, CVE-2026-72381, CVE-2026-72393,     CVE-2026-72398, CVE-2026-72399, CVE-2026-72412, CVE-2026-72417, CVE-2026-72422, CVE-2026-72429,     CVE-2026-72436, CVE-2026-72442, CVE-2026-72451, CVE-2026-72463, CVE-2026-72466, CVE-2026-72472,     CVE-2026-72473, CVE-2026-72477, CVE-2026-72491, CVE-2026-72493, CVE-2026-72494, CVE-2026-72495,     CVE-2026-72496, CVE-2026-72501, CVE-2026-74255, CVE-2026-74267, CVE-2026-74268, CVE-2026-74269,     CVE-2026-74287, CVE-2026-74310, CVE-2026-74345, CVE-2026-74350, CVE-2026-74361, CVE-2026-74376,     CVE-2026-74384, CVE-2026-74394, CVE-2026-74398, CVE-2026-74401, CVE-2026-74406, CVE-2026-74427,     CVE-2026-74428, CVE-2026-74433, CVE-2026-74434, CVE-2026-74436, CVE-2026-74439, CVE-2026-80665)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74132 advisory.

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
      * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
      * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)
      * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)


    Bug Fix(es) and Enhancement(s):

      * [AlmaLinux 8.10] kernel BUG at lib/list_debug.c:28!: list_add corruption in register_trace_event     AlmaLinux 8.10 (JIRA:AlmaLinux-214136)
      * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from     CVE-2026-63823 backport) (JIRA:AlmaLinux-270349)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74133 advisory.

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
      * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
      * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)
      * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)


    Bug Fix(es) and Enhancement(s):

      * [AlmaLinux 8.10] kernel BUG at lib/list_debug.c:28!: list_add corruption in register_trace_event     AlmaLinux 8.10 (JIRA:AlmaLinux-214136)
      * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from     CVE-2026-63823 backport) (JIRA:AlmaLinux-270349)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_74132 advisory.

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

    * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)

    * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

    Bug Fix(es) and Enhancement(s):

    * [Rocky Linux 8.10] kernel BUG at lib/list_debug.c:28!: list_add corruption in register_trace_event     Rocky Linux 8.10 (JIRA:Rocky Linux-214136)

    * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from     CVE-2026-63823 backport) (JIRA:Rocky Linux-270349)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74133 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

    * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)

    * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

    Bug Fix(es) and Enhancement(s):

    * [RHEL 8.10] kernel BUG at lib/list_debug.c:28!: list_add corruption in register_trace_event RHEL 8.10     (JIRA:RHEL-214136)

    * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from     CVE-2026-63823 backport) (JIRA:RHEL-270349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74132 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

    * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    * kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)

    * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

    Bug Fix(es) and Enhancement(s):

    * [RHEL 8.10] kernel BUG at lib/list_debug.c:28!: list_add corruption in register_trace_event RHEL 8.10     (JIRA:RHEL-214136)

    * request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from     CVE-2026-63823 backport) (JIRA:RHEL-270349)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
376875	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4411)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	high
335565	Linux Distros Unpatched Vulnerability : CVE-2026-72329	Nessus	Misc.	2026/8/15	2026/11/7	critical
377578	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-9003-1)	Nessus	Ubuntu Local Security Checks	2026/11/9	2026/11/9	medium
350177	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8816-1)	Nessus	Ubuntu Local Security Checks	2026/9/25	2026/11/11	critical
362407	AlmaLinux 8 : kernel-rt (ALSA-2026:74132)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	critical
362420	AlmaLinux 8 : kernel (ALSA-2026:74133)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	critical
362637	Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_74132)	Nessus	Rocky Linux Local Security Checks	2026/10/2	2026/10/2	critical
358415	RHEL 8 : kernel (RHSA-2026:74133)	Nessus	Red Hat Local Security Checks	2026/10/1	2026/10/1	critical
353412	RHEL 8 : kernel-rt (RHSA-2026:74132)	Nessus	Red Hat Local Security Checks	2026/9/30	2026/9/30	critical
376715	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4488)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	high

检测

插件搜索

high

critical

medium

critical

critical

critical

critical

critical

critical

high