The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68513 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware     platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual     machines using KVM.The packages also provide APIs for managing and interacting with the virtualized     systems.

    Security Fix(es):

    * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)

    * virt:rhel/libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * virt:rhel/libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917 )

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793036677 advisory.

  - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in     the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an     undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer     overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local     privilege escalation. (CVE-2026-18917)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_74424 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    Bug Fix(es) and Enhancement(s):

    * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [rhel-9.8.z] (JIRA:Rocky Linux-186018)

    * libvirt-guests does not work together with virtlockd on shutdown [rhel-9.8.z] (JIRA:Rocky Linux-224986)

    * Expose guest-get-devices in libvirt-api [rhel-9.8.z] (JIRA:Rocky Linux-243306)

    * allow hyperv pvpanic device to process Windows crash dump [rhel-9.8.z] (JIRA:Rocky Linux-242549)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75583 advisory.

    The libvirt library contains a C API for managing and interacting with the virtualization capabilities of     Linux and other operating systems. In addition, libvirt provides tools for remote management of     virtualized systems.

    Security Fix(es):

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    Bug Fix(es) and Enhancement(s):

    * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [rhel-10.2.z] (JIRA:RHEL-186019)

    * virsh dumpxml missing one SCSI disk when VMware VM has 64 disks per controller [rhel-10.2.z]     (JIRA:RHEL-191267)

    * libvirt-guests does not work together with virtlockd on shutdown [rhel-10.2.z] (JIRA:RHEL-224982)

    * Expose guest-get-devices in libvirt-api [rhel-10.2.z] (JIRA:RHEL-243305)

    * allow hyperv pvpanic device to process Windows crash dump [rhel-10.2.z] (JIRA:RHEL-242547)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75583 advisory.

    - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266,     CVE-2026-18917)
    - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75583 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    Bug Fix(es) and Enhancement(s):

    * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [rhel-10.2.z] (JIRA:Rocky Linux-186019)

    * virsh dumpxml missing one SCSI disk when VMware VM has 64 disks per controller [rhel-10.2.z] (JIRA:Rocky     Linux-191267)

    * libvirt-guests does not work together with virtlockd on shutdown [rhel-10.2.z] (JIRA:Rocky Linux-224982)

    * Expose guest-get-devices in libvirt-api [rhel-10.2.z] (JIRA:Rocky Linux-243305)

    * allow hyperv pvpanic device to process Windows crash dump [rhel-10.2.z] (JIRA:Rocky Linux-242547)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75583 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)
      * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)


    Bug Fix(es) and Enhancement(s):

      * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [almalinux-10.2.z] (JIRA:AlmaLinux-186019)
      * virsh dumpxml missing one SCSI disk when VMware VM has 64 disks per controller [almalinux-10.2.z]     (JIRA:AlmaLinux-191267)
      * libvirt-guests does not work together with virtlockd on shutdown [almalinux-10.2.z]     (JIRA:AlmaLinux-224982)
      * Expose guest-get-devices in libvirt-api [almalinux-10.2.z] (JIRA:AlmaLinux-243305)
      * allow hyperv pvpanic device to process Windows crash dump [almalinux-10.2.z] (JIRA:AlmaLinux-242547)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_75583 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    Bug Fix(es) and Enhancement(s):

    * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [rhel-10.2.z] (JIRA:Rocky Linux-186019)

    * virsh dumpxml missing one SCSI disk when VMware VM has 64 disks per controller [rhel-10.2.z] (JIRA:Rocky     Linux-191267)

    * libvirt-guests does not work together with virtlockd on shutdown [rhel-10.2.z] (JIRA:Rocky Linux-224982)

    * Expose guest-get-devices in libvirt-api [rhel-10.2.z] (JIRA:Rocky Linux-243305)

    * allow hyperv pvpanic device to process Windows crash dump [rhel-10.2.z] (JIRA:Rocky Linux-242547)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68514 advisory.

    The libvirt library contains a C API for managing and interacting with the virtualization capabilities of     Linux and other operating systems. In addition, libvirt provides tools for remote management of     virtualized systems.

    Security Fix(es):

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8831-1 advisory.

    It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler.
    A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2026-18917)

    It was discovered that libvirt did not correctly handle symbolic links when changing ownership of the TPM     emulator log file. A local attacker with access to the swtpm account could possibly use this issue to     cause libvirt to change the ownership of an arbitrary file. (CVE-2026-77159)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69131 advisory.

    Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware     platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual     machines using KVM.The packages also provide APIs for managing and interacting with the virtualized     systems.

    Security Fix(es):

    * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)

    * virt:rhel/libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * virt:rhel/libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69114 advisory.

    The libvirt library contains a C API for managing and interacting with the virtualization capabilities of     Linux and other operating systems. In addition, libvirt provides tools for remote management of     virtualized systems.

    Security Fix(es):

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)

    * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:74424 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)
      * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)


    Bug Fix(es) and Enhancement(s):

      * Live migration fails when virtio-vga becomes available, video device switches from virtio-gpu-pci to     virtio-vga on target [almalinux-9.8.z] (JIRA:AlmaLinux-186018)
      * libvirt-guests does not work together with virtlockd on shutdown [almalinux-9.8.z]     (JIRA:AlmaLinux-224986)
      * Expose guest-get-devices in libvirt-api [almalinux-9.8.z] (JIRA:AlmaLinux-243306)
      * allow hyperv pvpanic device to process Windows crash dump [almalinux-9.8.z] (JIRA:AlmaLinux-242549)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1982:08 advisory.

    * libvirt: swtpm privilege escalation via symlink following (CVE-2026-63622)
      * libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow     (CVE-2026-18917)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2139 advisory.

    A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in     the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an     undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer     overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local     privilege escalation. (CVE-2026-18917)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in     the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an     undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer     overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local     privilege escalation. (CVE-2026-18917)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
346854	RHEL 8 : virt:rhel (RHSA-2026:68513)	Nessus	Red Hat Local Security Checks	2026/9/17	2026/9/21	high
373897	CentOS Linux 7 [TuxCare] Security Update: libvirt / libvirt-admin / libvirt-bash-completion / libvirt-client / etc (CENTOS7:CLSA-2026:1793036677)	Nessus	CentOS Local Security Checks	2026/10/29	2026/10/29	high
362905	Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_74424)	Nessus	Rocky Linux Local Security Checks	2026/10/4	2026/10/4	high
362972	RHEL 10 : libvirt (RHSA-2026:75583)	Nessus	Red Hat Local Security Checks	2026/10/5	2026/10/5	high
362984	Oracle Linux 10 : libvirt (ELSA-2026-75583)	Nessus	Oracle Linux Local Security Checks	2026/10/5	2026/10/5	high
363145	RockyLinux 10 : libvirt (RLSA-2026:75583)	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/6	high
363416	AlmaLinux 10 : libvirt (ALSA-2026:75583)	Nessus	Alma Linux Local Security Checks	2026/10/6	2026/10/6	high
363850	Rocky Linux 10.2 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_75583)	Nessus	Rocky Linux Local Security Checks	2026/10/7	2026/10/7	high
346852	RHEL 9 : libvirt (RHSA-2026:68514)	Nessus	Red Hat Local Security Checks	2026/9/17	2026/9/18	high
350949	Ubuntu 24.04 LTS : libvirt vulnerabilities (USN-8831-1)	Nessus	Ubuntu Local Security Checks	2026/9/29	2026/9/29	high
348376	RHEL 8 : virt:rhel (RHSA-2026:69131)	Nessus	Red Hat Local Security Checks	2026/9/21	2026/9/25	high
348381	RHEL 7 : libvirt (RHSA-2026:69114)	Nessus	Red Hat Local Security Checks	2026/9/21	2026/9/25	high
362946	AlmaLinux 9 : libvirt (ALSA-2026:74424)	Nessus	Alma Linux Local Security Checks	2026/10/5	2026/10/5	high
363867	MiracleLinux 9 : libvirt-11.10.0-12.7.el9_8.ML.1 (AXSA:2026-1982:08)	Nessus	Miracle Linux Local Security Checks	2026/10/7	2026/10/8	high
345790	Amazon Linux 2023 : libvirt, libvirt-client, libvirt-client-qemu (ALAS2023-2026-2139)	Nessus	Amazon Linux Local Security Checks	2026/9/14	2026/9/18	high
338287	Linux Distros Unpatched Vulnerability : CVE-2026-18917	Nessus	Misc.	2026/8/20	2026/11/5	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high