The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8876-1 advisory.

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory     allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could     possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Serial ATA and Parallel ATA drivers;

    - Drivers core;

    - DRBD Distributed Replicated Block Device drivers;

    - Rados block device (RBD) driver;

    - Bluetooth drivers;

    - Cdrom driver;

    - Character device driver;

    - Hardware random number generator core;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DAX dirext access to differentiated memory framework;

    - DMA engine subsystem;

    - FireWire subsystem;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - Intel Stratix 10 firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - Intel Trace Hub HW tracing drivers;

    - I2C subsystem;

    - IIO subsystem;

    - IIO ADC drivers;

    - IIO Magnetometer sensors drivers;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - Input Device (Mouse) drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Multifunction device drivers;

    - Fastrpc Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Texas Instruments network drivers;

    - MediaTek network drivers;

    - NTB driver;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - Generic PM domains;

    - Power supply drivers;

    - Voltage and Current Regulator drivers;

    - Reset controller framework;

    - S/390 drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - SPI subsystem;

    - Media staging drivers;

    - Media Oriented Systems Transport (MOST) driver;

    - NVIDIA Tegra embedded controller (NVEC) staging driver;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Trusted Execution Environment drivers;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - USB DSL drivers;

    - Cadence USB3 driver;

    - ULPI bus;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB ChaosKey driver;

    - Siemens ID Mouse USB driver;

    - IOWarrior USB driver;

    - LD Didactic USB driver;

    - LEGO USB Tower driver;

    - USS720 USB parallel port adapter driver;

    - MediaTek USB3 DRD driver;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - USB over IP driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Watchdog drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - exFAT file system;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS file system;

    - HFS+ file system;

    - Journaling layer for block devices (JBD2);

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - Proc file system;

    - SMB network file system;

    - UDF file system;

    - XFS file system;

    - Software nodes and device properties;

    - Glob pattern matching library;

    - Netfilter;

    - Socket messages infrastructure;

    - Network sockets;

    - Memory Management;

    - Network traffic control;

    - IPv6 networking;

    - Bluetooth subsystem;

    - Networking core;

    - IP tunnels definitions;

    - IPv4 networking;

    - SCTP protocol;

    - XFRM subsystem;

    - io_uring subsystem;

    - IPC subsystem;

    - Audit subsystem;

    - BPF subsystem;

    - Control group (cgroup);

    - Kernel CPU control infrastructure;

    - Kernel exit() syscall;

    - Kernel futex primitives;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Cryptographic library;

    - Debug objects infrastructure;

    - Resizable hashtable library;

    - Memory management;

    - 6LoWPAN network protocol;

    - IEEE 802 network protocols;

    - 9P file system network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Ceph Core library;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IFE protocol;

    - IUCV driver;

    - KCM (Kernel Connection Multiplexor) sockets driver;

    - Logical Link layer;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Management Component Transport Protocol (MCTP);

    - MultiProtocol Label Switching driver;

    - NetLabel subsystem;

    - Open vSwitch;

    - Packet sockets;

    - Phonet protocol;

    - Packet sampling (psample);

    - Qualcomm IPC Router (QRTR);

    - RDS protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - X.25 network layer;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Apple Onboard Audio ALSA driver;

    - ALSA framework;

    - Generic PCM loopback sound driver;

    - FireWire sound drivers;

    - ESS Solo-1 ALSA driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - NVIDIA Tegra ASoC drivers;

    - USB sound devices;

    - Perf tools;

    - KVM subsystem; (CVE-2023-54125, CVE-2023-54271, CVE-2025-22026, CVE-2025-23131, CVE-2025-39863,     CVE-2025-39929, CVE-2025-39931, CVE-2026-23364, CVE-2026-31449, CVE-2026-31451, CVE-2026-31610,     CVE-2026-31700, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712, CVE-2026-31715,     CVE-2026-43064, CVE-2026-43216, CVE-2026-43219, CVE-2026-43350, CVE-2026-43355, CVE-2026-43491,     CVE-2026-43492, CVE-2026-45850, CVE-2026-45930, CVE-2026-45991, CVE-2026-45999, CVE-2026-46003,     CVE-2026-46021, CVE-2026-46026, CVE-2026-46038, CVE-2026-46052, CVE-2026-46056, CVE-2026-46065,     CVE-2026-46069, CVE-2026-46078, CVE-2026-46086, CVE-2026-46090, CVE-2026-46091, CVE-2026-46092,     CVE-2026-46103, CVE-2026-46116, CVE-2026-46159, CVE-2026-46160, CVE-2026-46169, CVE-2026-46180,     CVE-2026-46191, CVE-2026-46193, CVE-2026-46196, CVE-2026-46208, CVE-2026-46252, CVE-2026-46291,     CVE-2026-46292, CVE-2026-46299, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322, CVE-2026-52909,     CVE-2026-52910, CVE-2026-52913, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923, CVE-2026-52927,     CVE-2026-52928, CVE-2026-52929, CVE-2026-52930, CVE-2026-52933, CVE-2026-52934, CVE-2026-52935,     CVE-2026-52939, CVE-2026-52942, CVE-2026-52943, CVE-2026-52947, CVE-2026-52948, CVE-2026-52977,     CVE-2026-53080, CVE-2026-53090, CVE-2026-53133, CVE-2026-53134, CVE-2026-53135, CVE-2026-53136,     CVE-2026-53137, CVE-2026-53138, CVE-2026-53139, CVE-2026-53146, CVE-2026-53148, CVE-2026-53149,     CVE-2026-53150, CVE-2026-53157, CVE-2026-53158, CVE-2026-53159, CVE-2026-53161, CVE-2026-53167,     CVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53189, CVE-2026-53194, CVE-2026-53195,     CVE-2026-53196, CVE-2026-53199, CVE-2026-53208, CVE-2026-53213, CVE-2026-53217, CVE-2026-53218,     CVE-2026-53219, CVE-2026-53223, CVE-2026-53227, CVE-2026-53238, CVE-2026-53239, CVE-2026-53245,     CVE-2026-53249, CVE-2026-53252, CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,     CVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266, CVE-2026-53268, CVE-2026-53269,     CVE-2026-53270, CVE-2026-53273, CVE-2026-53275, CVE-2026-53325, CVE-2026-53332, CVE-2026-53392,     CVE-2026-53393, CVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-63806, CVE-2026-63810,     CVE-2026-63815, CVE-2026-63817, CVE-2026-63818, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829,     CVE-2026-63830, CVE-2026-64187, CVE-2026-64189, CVE-2026-64206, CVE-2026-64266, CVE-2026-64268,     CVE-2026-64269, CVE-2026-64271, CVE-2026-64273, CVE-2026-64274, CVE-2026-64275, CVE-2026-64276,     CVE-2026-64277, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298, CVE-2026-64299, CVE-2026-64301,     CVE-2026-64303, CVE-2026-64304, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64315,     CVE-2026-64316, CVE-2026-64317, CVE-2026-64318, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324,     CVE-2026-64329, CVE-2026-64330, CVE-2026-64331, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334,     CVE-2026-64335, CVE-2026-64336, CVE-2026-64337, CVE-2026-64338, CVE-2026-64340, CVE-2026-64342,     CVE-2026-64343, CVE-2026-64344, CVE-2026-64346, CVE-2026-64347, CVE-2026-64350, CVE-2026-64351,     CVE-2026-64352, CVE-2026-64355, CVE-2026-64359, CVE-2026-64360, CVE-2026-64361, CVE-2026-64362,     CVE-2026-64363, CVE-2026-64364, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373,     CVE-2026-64374, CVE-2026-64375, CVE-2026-64379, CVE-2026-64380, CVE-2026-64381, CVE-2026-64390,     CVE-2026-64401, CVE-2026-64403, CVE-2026-64408, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413,     CVE-2026-64420, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425, CVE-2026-64428, CVE-2026-64429,     CVE-2026-64430, CVE-2026-64432, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64440,     CVE-2026-64441, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444, CVE-2026-64445, CVE-2026-64446,     CVE-2026-64448, CVE-2026-64450, CVE-2026-64452, CVE-2026-64454, CVE-2026-64455, CVE-2026-64456,     CVE-2026-64461, CVE-2026-64462, CVE-2026-64465, CVE-2026-64468, CVE-2026-64469, CVE-2026-64470,     CVE-2026-64471, CVE-2026-64475, CVE-2026-64478, CVE-2026-64483, CVE-2026-64484, CVE-2026-64487,     CVE-2026-64488, CVE-2026-64494, CVE-2026-64495, CVE-2026-64496, CVE-2026-64497, CVE-2026-64500,     CVE-2026-64503, CVE-2026-64504, CVE-2026-64505, CVE-2026-64510, CVE-2026-64512, CVE-2026-64514,     CVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534, CVE-2026-64535, CVE-2026-64536,     CVE-2026-64537, CVE-2026-64538, CVE-2026-64540, CVE-2026-64541, CVE-2026-64543, CVE-2026-64544,     CVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,     CVE-2026-64551, CVE-2026-64553, CVE-2026-64554, CVE-2026-64560, CVE-2026-64562, CVE-2026-64563,     CVE-2026-64564, CVE-2026-64565, CVE-2026-64567, CVE-2026-64569, CVE-2026-64571, CVE-2026-64572,     CVE-2026-64573, CVE-2026-64576, CVE-2026-64578, CVE-2026-64579, CVE-2026-64582, CVE-2026-64583,     CVE-2026-64584, CVE-2026-64593, CVE-2026-64594, CVE-2026-64599, CVE-2026-64600, CVE-2026-64602,     CVE-2026-64604, CVE-2026-68088, CVE-2026-68090, CVE-2026-68091, CVE-2026-68104, CVE-2026-68106,     CVE-2026-68111, CVE-2026-68115, CVE-2026-68117, CVE-2026-68121, CVE-2026-68123, CVE-2026-68125,     CVE-2026-68127, CVE-2026-68129, CVE-2026-68131, CVE-2026-68135, CVE-2026-68137, CVE-2026-68140,     CVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144, CVE-2026-68151, CVE-2026-68153,     CVE-2026-68154, CVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68160,     CVE-2026-68175, CVE-2026-68176, CVE-2026-68180, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,     CVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68190, CVE-2026-68192, CVE-2026-68195,     CVE-2026-68196, CVE-2026-68197, CVE-2026-68199, CVE-2026-68204, CVE-2026-68209, CVE-2026-68212,     CVE-2026-68213, CVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218,     CVE-2026-68222, CVE-2026-68223, CVE-2026-68226, CVE-2026-68227, CVE-2026-68229, CVE-2026-68231,     CVE-2026-68234, CVE-2026-68243, CVE-2026-68244, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250,     CVE-2026-68284, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301,     CVE-2026-68304, CVE-2026-68309, CVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322,     CVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328, CVE-2026-68331,     CVE-2026-68333, CVE-2026-68335, CVE-2026-68338, CVE-2026-68340, CVE-2026-68349, CVE-2026-68350,     CVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355, CVE-2026-68357,     CVE-2026-68360, CVE-2026-68361, CVE-2026-68363, CVE-2026-68365, CVE-2026-68366, CVE-2026-68368,     CVE-2026-68369, CVE-2026-68370, CVE-2026-68373, CVE-2026-68376, CVE-2026-68377, CVE-2026-68388,     CVE-2026-68395, CVE-2026-68397, CVE-2026-68398, CVE-2026-68402, CVE-2026-68403, CVE-2026-68405,     CVE-2026-68406, CVE-2026-68410, CVE-2026-68411, CVE-2026-68413, CVE-2026-68414, CVE-2026-68417,     CVE-2026-68422, CVE-2026-68425, CVE-2026-68428, CVE-2026-68430, CVE-2026-68432, CVE-2026-68433,     CVE-2026-68444, CVE-2026-68446, CVE-2026-68449, CVE-2026-68450, CVE-2026-68451, CVE-2026-68452,     CVE-2026-68456, CVE-2026-68459, CVE-2026-68460, CVE-2026-68461, CVE-2026-68466, CVE-2026-68467,     CVE-2026-68469, CVE-2026-68474, CVE-2026-68475, CVE-2026-68477, CVE-2026-68478, CVE-2026-68479,     CVE-2026-68480, CVE-2026-72004, CVE-2026-72005, CVE-2026-72010, CVE-2026-72013, CVE-2026-72014,     CVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72024, CVE-2026-72025,     CVE-2026-72033, CVE-2026-72036, CVE-2026-72038, CVE-2026-72039, CVE-2026-72047, CVE-2026-72048,     CVE-2026-72049, CVE-2026-72052, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72061,     CVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72074, CVE-2026-72076, CVE-2026-72078,     CVE-2026-72079, CVE-2026-72081, CVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,     CVE-2026-72086, CVE-2026-72088, CVE-2026-72102, CVE-2026-72105, CVE-2026-72107, CVE-2026-72108,     CVE-2026-72109, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116, CVE-2026-72117,     CVE-2026-72118, CVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,     CVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72129, CVE-2026-72133, CVE-2026-72135,     CVE-2026-72136, CVE-2026-72138, CVE-2026-72140, CVE-2026-72146, CVE-2026-72153, CVE-2026-72159,     CVE-2026-72160, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165, CVE-2026-72166, CVE-2026-72167,     CVE-2026-72171, CVE-2026-72181, CVE-2026-72182, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194,     CVE-2026-72195, CVE-2026-72197, CVE-2026-72215, CVE-2026-72218, CVE-2026-72219, CVE-2026-72223,     CVE-2026-72224, CVE-2026-72225, CVE-2026-72226, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230,     CVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72234, CVE-2026-72235, CVE-2026-72238,     CVE-2026-72240, CVE-2026-72241, CVE-2026-72245, CVE-2026-72247, CVE-2026-72250, CVE-2026-72251,     CVE-2026-72256, CVE-2026-72264, CVE-2026-72265, CVE-2026-72267, CVE-2026-72268, CVE-2026-72269,     CVE-2026-72270, CVE-2026-72271, CVE-2026-72272, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276,     CVE-2026-72282, CVE-2026-72289, CVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72306,     CVE-2026-72307, CVE-2026-72310, CVE-2026-72314, CVE-2026-72316, CVE-2026-72319, CVE-2026-72322,     CVE-2026-72326, CVE-2026-72339, CVE-2026-72347, CVE-2026-72348, CVE-2026-72349, CVE-2026-72350,     CVE-2026-72351, CVE-2026-72371, CVE-2026-72374, CVE-2026-72378, CVE-2026-72389, CVE-2026-72392,     CVE-2026-72396, CVE-2026-72400, CVE-2026-72406, CVE-2026-72409, CVE-2026-72414, CVE-2026-72418,     CVE-2026-72421, CVE-2026-72422, CVE-2026-72428, CVE-2026-72433, CVE-2026-72435, CVE-2026-72441,     CVE-2026-72447, CVE-2026-72448, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460, CVE-2026-72466,     CVE-2026-72476, CVE-2026-72479, CVE-2026-72481, CVE-2026-72483, CVE-2026-72484, CVE-2026-72489,     CVE-2026-72491, CVE-2026-72492, CVE-2026-72502, CVE-2026-74255, CVE-2026-74256, CVE-2026-74262,     CVE-2026-74265, CVE-2026-74267, CVE-2026-74276, CVE-2026-74279, CVE-2026-74280, CVE-2026-74281,     CVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74287, CVE-2026-74288, CVE-2026-74292,     CVE-2026-74293, CVE-2026-74295, CVE-2026-74297, CVE-2026-74305, CVE-2026-74312, CVE-2026-74313,     CVE-2026-74320, CVE-2026-74321, CVE-2026-74327, CVE-2026-74329, CVE-2026-74330, CVE-2026-74331,     CVE-2026-74339, CVE-2026-74340, CVE-2026-74346, CVE-2026-74348, CVE-2026-74349, CVE-2026-74351,     CVE-2026-74359, CVE-2026-74363, CVE-2026-74376, CVE-2026-74379, CVE-2026-74382, CVE-2026-74384,     CVE-2026-74390, CVE-2026-74394, CVE-2026-74395, CVE-2026-74398, CVE-2026-74399, CVE-2026-74402,     CVE-2026-74408, CVE-2026-74410, CVE-2026-74416, CVE-2026-74424, CVE-2026-74426, CVE-2026-74427,     CVE-2026-74438, CVE-2026-74443, CVE-2026-74444, CVE-2026-74453, CVE-2026-74455, CVE-2026-74456,     CVE-2026-74457, CVE-2026-74458, CVE-2026-74459, CVE-2026-74460, CVE-2026-74461, CVE-2026-74463,     CVE-2026-74464, CVE-2026-74465, CVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74471,     CVE-2026-74473, CVE-2026-74475, CVE-2026-74478, CVE-2026-74480, CVE-2026-74481, CVE-2026-74482,     CVE-2026-74485, CVE-2026-74488, CVE-2026-74490, CVE-2026-74492, CVE-2026-74493, CVE-2026-74495,     CVE-2026-74497, CVE-2026-74498, CVE-2026-74499, CVE-2026-74505, CVE-2026-74507, CVE-2026-74508,     CVE-2026-74512, CVE-2026-74518, CVE-2026-74519, CVE-2026-74523, CVE-2026-74525, CVE-2026-74540,     CVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549, CVE-2026-74556, CVE-2026-74557,     CVE-2026-74563, CVE-2026-74564, CVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74577,     CVE-2026-74578, CVE-2026-74579)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500249 advisory.

    - inet: frags: strip GSO state from fragments before reassembly (Xinyang Ge)  [Orabug: 39974835]     {CVE-2026-80590}
    - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack) [Orabug:
    39830590] {CVE-2026-64561}
    - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)     [Orabug: 39830590,39832946] {CVE-2026-64561}
    - KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack) [Orabug: 39830590] {CVE-2026-64561}
    - KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack) [Orabug: 39830590] {CVE-2026-64561}
    - KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng) [Orabug: 39830590] {CVE-2026-64561}
    - KVM: x86/mmu: Document the 'rules' for using host_pfn_mapping_level() (Sean Christopherson) [Orabug:
    39830590] {CVE-2026-64561}
    - KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson) [Orabug:
    39830590] {CVE-2026-64561}
    - KVM: x86/mmu: Directly 'destroy' PTE list when recycling rmaps (Sean Christopherson) [Orabug: 39830590]     {CVE-2026-64561}
    - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov) [Orabug: 39784615,39853775]     {CVE-2026-68480}
    - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner) [Orabug:
    39784615] {CVE-2026-68480}
    - x86/alternative: Support relocations in alternatives (Peter Zijlstra) [Orabug: 39784615]     {CVE-2026-68480}
    - x86/alternative: Make debug-alternative selective (Peter Zijlstra) [Orabug: 39784615] {CVE-2026-68480}
    - x86/alternatives: Add alt_instr.flags (Borislav Petkov) [Orabug: 39784615] {CVE-2026-68480}
    - x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra) [Orabug: 39784615] {CVE-2026-68480}
    - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Thomas Gleixner) [Orabug: 39807438]     {CVE-2026-64560}
    - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() (Hyeongjun An) [Orabug: 39853280]     {CVE-2026-64479}
    - crypto: qat - validate RSA CRT component lengths (Giovanni Cabiddu) [Orabug: 39785885] {CVE-2026-64304}
    - btrfs: do not trim a device which is not writeable (Qu Wenruo) [Orabug: 39843586] {CVE-2026-64593}
    - bpf: Allow LPM map access from sleepable BPF programs (Vlad Poenaru) [Orabug: 39786046] {CVE-2026-64352}
    - bpf: Reject fragmented frames in devmap (Zhao Zhang) [Orabug: 39786052] {CVE-2026-64355}
    - HID: appleir: fix UAF on pending key_up_timer in remove() (Manish Khadka) [Orabug: 39786074]     {CVE-2026-64363}
    - proc: protect ptrace_may_access() with exec_update_lock (part 1) (Jann Horn) [Orabug: 39786095]     {CVE-2026-64371}
    - HID: multitouch: fix out-of-bounds bit access on mt_io_flags (Trung Nguyen) [Orabug: 39786078]     {CVE-2026-64364}
    - proc: protect ptrace_may_access() with exec_update_lock (FD links) (Jann Horn) [Orabug: 39786112]     {CVE-2026-64375}
    - smb: client: harden POSIX SID length parsing (Zihan Xi) [Orabug: 39786128] {CVE-2026-64380}
    - smb: client: mask server-provided mode to 07777 in modefromsid (Norbert Manthey) [Orabug: 39786124]     {CVE-2026-64379}
    - smb: client: resolve SWN tcon from live registrations (Michael Bommarito) [Orabug: 39786200]     {CVE-2026-64401}
    - smb: client: Fix next buffer leak in receive_encrypted_standard() (Haoxiang Li) [Orabug: 39786131]     {CVE-2026-64381}
    - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock (Runyu Xiao) [Orabug: 39760901]     {CVE-2026-64206}
    - netfilter: ebtables: zero chainstack array (Florian Westphal) [Orabug: 39786232] {CVE-2026-64413}
    - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()     (Alexandru Hossu) [Orabug: 39786307] {CVE-2026-64441}
    - PCI: mediatek: Fix IRQ domain leak when port fails to enable (Manivannan Sadhasivam) [Orabug: 39786366]     {CVE-2026-64461}
    - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() (Alexandru Hossu) [Orabug:
    39786327] {CVE-2026-64446}
    - smb: client: restrict implied bcc[0] exemption to responses without data area (Shoichiro Miyamoto)     [Orabug: 39786332] {CVE-2026-64448}
    - vfio/pci: Release the VGA arbiter client on register_device() failure (Alex Williamson) [Orabug:
    39786409] {CVE-2026-64475}
    - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup (Rafael J. Wysocki) [Orabug: 39786502]     {CVE-2026-64510}
    - ACPI: CPPC: Suppress UBSAN warning caused by field misuse (Jeremy Linton) [Orabug: 39786508]     {CVE-2026-64512}
    - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada) [Orabug:
    39789564,39816016,39819143] {CVE-2026-64531}
    - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (Shivam Kumar) [Orabug:
    39789573] {CVE-2026-64534}
    - sctp: validate STALE_COOKIE cause length before reading staleness (Weiming Shi) [Orabug: 39794431]     {CVE-2026-64551}
    - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (Xiang Mei) [Orabug: 39794442]     {CVE-2026-64554}
    - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() (Weiming Shi) [Orabug: 39794421]     {CVE-2026-64549}
    - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (Xiang Mei) [Orabug: 39794412]     {CVE-2026-64547}
    - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (Xiang Mei) [Orabug: 39794387]     {CVE-2026-64540}
    - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (Jamal Hadi Salim) [Orabug: 39787017]     {CVE-2026-64530}
    - net, bpf: check master for NULL in xdp_master_redirect() (Xiang Mei) [Orabug: 39794405] {CVE-2026-64545}
    - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). (Xiang Mei) [Orabug: 39794379] {CVE-2026-64538}
    - drm/edid: fix OOB read in drm_parse_tiled_block() (Xiang Mei) [Orabug: 39794408] {CVE-2026-64546}
    - net: psample: fix info leak in PSAMPLE_ATTR_DATA (Jakub Kicinski) [Orabug: 39794438] {CVE-2026-64553}
    - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (Weiming Shi) [Orabug: 39794417]     {CVE-2026-64548}
    - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (Weiming Shi) [Orabug: 39794401]     {CVE-2026-64544}
    - xfs: fail recovery on a committed log item with no regions (Weiming Shi) [Orabug: 39760871]     {CVE-2026-64187}
    - fuse: re-lock request before returning from fuse_ref_folio() (Joanne Koong) [Orabug: 39785786]     {CVE-2026-64266}
    - Input: touchwin - reset the packet index on every complete packet (Bryam Vargas) [Orabug: 39785802]     {CVE-2026-64271}
    - Input: elan_i2c - prevent division by zero and arithmetic underflow (Ranjan Kumar) [Orabug: 39785819]     {CVE-2026-64275}
    - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (Bryam Vargas) [Orabug: 39785823]     {CVE-2026-64276}
    - i2c: core: fix adapter deregistration race (Johan Hovold) [Orabug: 39785831] {CVE-2026-64279}
    - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode (Sean Christopherson)     [Orabug: 39843616] {CVE-2026-64604}
    - exfat: bound uniname advance in exfat_find_dir_entry() (Bryam Vargas) [Orabug: 39785863]     {CVE-2026-64296}
    - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (Benjamin Coddington) [Orabug: 39785868]     {CVE-2026-64298}
    - tracing: Prevent out-of-bounds read in glob matching (Huihui Huang) [Orabug: 39785872] {CVE-2026-64299}
    - crypto: drbg - Fix returning success on failure in CTR_DRBG (Eric Biggers) [Orabug: 39785893]     {CVE-2026-64306}
    - crypto: pcrypt - restore callback for non-parallel fallback (Ruijie Li) [Orabug: 39785906]     {CVE-2026-64312}
    - crypto: ecc - Fix carry overflow in vli multiplication (Anastasia Tishchenko) [Orabug: 39785910]     {CVE-2026-64313}
    - isofs: bound Rock Ridge symlink components to the SL record (Bryam Vargas) [Orabug: 39785923]     {CVE-2026-64317}
    - udf: validate sparing table length as an entry count, not a byte count (Bryam Vargas) [Orabug: 39785940]     {CVE-2026-64322}
    - udf: validate VAT header length against the VAT inode size (Bryam Vargas) [Orabug: 39785944]     {CVE-2026-64323}
    - udf: validate free block extents against the partition length (Michael Bommarito) [Orabug: 39785948]     {CVE-2026-64324}
    - usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (Badhri Jagan Sridharan) [Orabug:
    39785963] {CVE-2026-64330}
    - usbip: vudc: fix NULL deref in vep_dequeue() (Sam Day) [Orabug: 39785967] {CVE-2026-64331}
    - USB: ulpi: fix memory leak on registration failure (Johan Hovold) [Orabug: 39785971] {CVE-2026-64332}
    - USB: serial: digi_acceleport: fix write buffer corruption (Johan Hovold) [Orabug: 39785975]     {CVE-2026-64333}
    - USB: serial: digi_acceleport: fix hard lockup on disconnect (Johan Hovold) [Orabug: 39785979]     {CVE-2026-64334}
    - USB: serial: digi_acceleport: fix broken rx after throttle (Johan Hovold) [Orabug: 39785983]     {CVE-2026-64335}
    - USB: serial: keyspan_pda: fix information leak (Johan Hovold) [Orabug: 39785987] {CVE-2026-64336}
    - USB: misc: uss720: unregister parport on probe failure (Myeonghun Pak) [Orabug: 39785994]     {CVE-2026-64338}
    - USB: legousbtower: fix use-after-free on disconnect race (Johan Hovold) [Orabug: 39785999]     {CVE-2026-64340}
    - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold) [Orabug: 39786007] {CVE-2026-64342}
    - USB: ldusb: fix use-after-free on disconnect race (Johan Hovold) [Orabug: 39786012] {CVE-2026-64343}
    - USB: idmouse: fix use-after-free on disconnect race (Johan Hovold) [Orabug: 39786017] {CVE-2026-64344}
    - usb: gadget: udc: Fix use-after-free in gadget_match_driver (Jimmy Hu) [Orabug: 39786026]     {CVE-2026-64346}
    - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (Maoyi Xie) [Orabug: 39786030]     {CVE-2026-64347}
    - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (Maoyi Xie) [Orabug: 39786042]     {CVE-2026-64351}
    - HID: lg-g15: cancel pending work on remove to fix a use-after-free (Maoyi Xie) [Orabug: 39786071]     {CVE-2026-64362}
    - HID: wacom: stop hardware after post-start probe failures (Myeonghun Pak) [Orabug: 39859299]     {CVE-2026-68091}
    - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Xu Wang) [Orabug: 39786091]     {CVE-2026-64370}
    - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (Yuho Choi) [Orabug: 39786100]     {CVE-2026-64372}
    - cpufreq: Fix hotplug-suspend race during reboot (Tianxiang Chen) [Orabug: 39786104] {CVE-2026-64373}
    - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT (Steven Rostedt) [Orabug: 39786108]     {CVE-2026-64374}
    - net: Drop the lock in skb_may_tx_timestamp() (Sebastian Andrzej Siewior) [Orabug: 39331701]     {CVE-2026-43216}
    - Bluetooth: L2CAP: validate option length before reading conf opt value (Muhammad Bilal) [Orabug:
    39786205] {CVE-2026-64403}
    - Bluetooth: fix UAF in bt_accept_dequeue() (Yousef Alhouseen) [Orabug: 39786578] {CVE-2026-64406}
    - Bluetooth: bnep: pin L2CAP connection during netdev registration (Yousef Alhouseen) [Orabug: 39786217]     {CVE-2026-64408}
    - netfilter: ebtables: terminate table name before find_table_lock() (Xiang Mei) [Orabug: 39786224]     {CVE-2026-64411}
    - netfilter: ebtables: module names must be null-terminated (Florian Westphal) [Orabug: 39786228]     {CVE-2026-64412}
    - mfd: cros_ec: Delay dev_set_drvdata() until probe success (Andrei Kuchynski) [Orabug: 39786248]     {CVE-2026-64420}
    - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (Wyatt Feng) [Orabug: 39786254]     {CVE-2026-64422}
    - ipv4: igmp: remove multicast group from hash table on device destruction (Yuyang Huang) [Orabug:
    39786259] {CVE-2026-64423}
    - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (Runyu Xiao) [Orabug: 39786574]     {CVE-2026-64425}
    - audit: Fix data races of skb_queue_len() readers on audit_queue (Chi Wang) [Orabug: 39786289]     {CVE-2026-64435}
    - net: af_key: initialize alg_key_len for IPComp states (Zijing Yin) [Orabug: 39786293] {CVE-2026-64436}
    - crypto: amlogic - avoid double cleanup in meson_crypto_probe() (Dawei Feng) [Orabug: 39843604]     {CVE-2026-64599}
    - staging: rtl8723bs: fix OOB write in HT_caps_handler() (Alexandru Hossu) [Orabug: 39786303]     {CVE-2026-64440}
    - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (Alexandru Hossu) [Orabug: 39789581]     {CVE-2026-64536}
    - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (Alexandru Hossu)     [Orabug: 39786311] {CVE-2026-64442}
    - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (Alexandru Hossu) [Orabug: 39786315]     {CVE-2026-64443}
    - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (Alexandru Hossu) [Orabug: 39786319]     {CVE-2026-64444}
    - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (Alexandru Hossu) [Orabug:
    39786323] {CVE-2026-64445}
    - tipc: fix out-of-bounds read in broadcast Gap ACK blocks (Samuel Page) [Orabug: 39786340]     {CVE-2026-64450}
    - 6lowpan: fix NHC entry use-after-free on error path (Yizhou Zhao) [Orabug: 39786344] {CVE-2026-64452}
    - usb: dwc3: run gadget disconnect from sleepable suspend context (Runyu Xiao) [Orabug: 39786349]     {CVE-2026-64454}
    - USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (Alan Stern) [Orabug: 39786352]     {CVE-2026-64455}
    - hwrng: virtio: clamp device-reported used.len at copy_data() (Michael Bommarito) [Orabug: 39786356]     {CVE-2026-64456}
    - netfilter: ipset: fix race between dump and ip_set_list resize (Xiang Mei) [Orabug: 39760883]     {CVE-2026-64189}
    - usb: xhci: Fix sleep in atomic context in xhci_free_streams() (Lianqin Hu) [Orabug: 39786379]     {CVE-2026-64465}
    - Bluetooth: btusb: fix use-after-free on marvell probe failure (Johan Hovold) [Orabug: 39786393]     {CVE-2026-64470}
    - Bluetooth: btusb: fix use-after-free on registration failure (Johan Hovold) [Orabug: 39786397]     {CVE-2026-64471}
    - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Darvell Long) [Orabug: 39786416]     {CVE-2026-64478}
    - ALSA: firewire: isight: bound the sample count to the packet payload (Maoyi Xie) [Orabug: 39786428]     {CVE-2026-64483}
    - ALSA: es1938: check snd_ctl_new1() return value (Zhao Dongdong) [Orabug: 39786432] {CVE-2026-64484}
    - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser (Maoyi Xie) [Orabug:
    39786439] {CVE-2026-64487}
    - iio: event: Fix event FIFO reset race (Lars-Peter Clausen) [Orabug: 39786462] {CVE-2026-64496}
    - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (Biren Pandya) [Orabug: 39786478]     {CVE-2026-64503}
    - iio: accel: bmc150: clamp the device-reported FIFO frame count (Bryam Vargas) [Orabug: 39786482]     {CVE-2026-64504}
    - NFSv4/flexfiles: reject zero filehandle version count (Michael Bommarito) [Orabug: 39753894]     {CVE-2026-53392}
    - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() (Mingyu Wang) [Orabug: 39753924]     {CVE-2026-53402}
    - i2c: core: fix adapter registration race (Johan Hovold) [Orabug: 39753916] {CVE-2026-53400}
    - block: Avoid mounting the bdev pseudo-filesystem in userspace (Denis Arefev) [Orabug: 39753985]     {CVE-2026-63810}
    - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Maoyi Xie) [Orabug: 39754045]     {CVE-2026-63829}
    - net: skmsg: preserve sg.copy across SG transforms (Yiming Qian) [Orabug: 39754049] {CVE-2026-63830}
    - netfilter: nf_tables: restore set elements when delete set fails (Pablo Neira Ayuso) [Orabug: 36598010]     {CVE-2024-27012}
    - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (Sean     Christopherson) [Orabug: 39753972] {CVE-2026-63806}
    - userfaultfd: gate must_wait writability check on pte_present() (Kiryl Shutsemau) [Orabug: 39786515]     {CVE-2026-64514}
    - nfsd: reset write verifier on deferred writeback errors (Jeff Layton) [Orabug: 39753898]     {CVE-2026-53393}
    - nfsd: release layout stid on setlease failure (Chris Mason) [Orabug: 39753912] {CVE-2026-53399}
    - nvmet-tcp: fix race between ICReq handling and queue teardown (Chaitanya Kulkarni) [Orabug: 39460310]     {CVE-2026-46135}
    - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug:
    39558744] {CVE-2026-74684}
    - net/rds: zero per-item info buffer before handing it to visitors (Michael Bommarito) [Orabug:
    39621715,39638197] {CVE-2026-52995}
    - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38334919]     {CVE-2025-38560}
    - xfs: resample the data fork mapping after cycling ILOCK (Darrick Wong) [Orabug: 39776791]     {CVE-2026-64600}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath(CVE-2026-43112)

    lib/crypto: chacha: Zeroize permuted_state before it leaves scope(CVE-2026-43336)

    MIPS: Work around LLVM bug when gp is used as global register variable(CVE-2026-46250)

    bridge: br_nd_send: validate ND option lengths(CVE-2026-31752)

    iommu/vt-d: Clear Present bit before tearing down PASID entry(CVE-2026-45894)

    xfs: remove xfs_attr_leaf_hasname(CVE-2026-43153)

    smb: client: reject userspace cifs.spnego descriptions(CVE-2026-46243)

    usb: ulpi: fix double free in ulpi_register_interface() error path(CVE-2026-31759)

    crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed(CVE-2026-31698)

    RDMA/hns: Fix WQ_MEM_RECLAIM warning(CVE-2026-46265)

    KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1(CVE-2026-46076)

    netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation(CVE-2026-45859)

    RDMA/umem: Fix double dma_buf_unpin in failure path(CVE-2026-43128)

    mm/page_alloc: change all pageblocks migrate type on coalescing(CVE-2025-71134)

    slip: reject VJ receive packets on instances with no rstate array(CVE-2026-45842)

    net/tcp-md5: Fix MAC comparison to be constant-time(CVE-2026-43383)

    scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()(CVE-2026-45872)

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

    tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()(CVE-2026-46196)

    tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure(CVE-2026-45941)

    zram: do not forget to endio for partial discard requests(CVE-2026-46089)

    KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0(CVE-2026-46082)

    vsock: fix buffer size clamping order(CVE-2026-46234)

    ipv4: icmp: validate reply type before using icmp_pointers(CVE-2026-46037)

    powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()(CVE-2026-43148)

    ipmi: Check event message buffer response for bad data(CVE-2026-46128)

    netfilter: arp_tables: fix IEEE1394 ARP payload parsing(CVE-2026-45844)

    ext4: move ext4_percpu_param_init() before ext4_mb_init()(CVE-2026-43288)

    usb: typec: ucsi: validate connector number in ucsi_notify_common()(CVE-2026-31729)

    dm: remove fake timeout to avoid leak request(CVE-2026-43314)

    nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free(CVE-2026-46304)

    xfrm: Wait for RCU readers during policy netns exit(CVE-2026-43091)

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-43233)

    scsi: core: Fix refcount leak for tagset_refcnt(CVE-2026-23296)

    md/raid10: fix deadlock with check operation and nowait requests(CVE-2026-46050)

    netfilter: nf_conncount: increase the connection clean up limit to 64(CVE-2026-45860)

    crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed(CVE-2026-31697)

    net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ(CVE-2026-43465)

    fanotify: fix false positive on permission events(CVE-2026-46150)

    ipv6: icmp: clear skb2-cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)

    APEI/GHES: ensure that won't go past CPER allocated record(CVE-2026-43277)

    openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-45840)

    AppArmor: Allow apparmor to handle unaligned dfa tables(CVE-2026-46254)

    tun: free page on short-frame rejection in tun_xdp_one()(CVE-2026-46321)

    smb: client: validate dacloffset before building DACL pointers(CVE-2026-46195)

    bpf: sockmap: Fix use-after-free of sk-sk_socket in sk_psock_verdict_data_ready().(CVE-2026-43016)

    net: af_key: zero aligned sockaddr tail in PF_KEY exports(CVE-2026-43088)

    iommu/amd: move wait_on_sem() out of spinlock(CVE-2026-43253)

    fs/buffer: add alert in try_to_free_buffers() for folios without buffers(CVE-2025-71295)

    ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1(CVE-2026-45858)

    fat: avoid parent link count underflow in rmdir(CVE-2026-45915)

    mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()(CVE-2026-46190)

    tcp: call sk_data_ready() after listener migration(CVE-2026-46015)

    sched/rt: Skip currently executing CPU in rto_next_cpu()(CVE-2026-45919)

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-43139)

    rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43499)

    bpf: Fix bpf_xdp_store_bytes proto for read-only arg(CVE-2026-45886)

    ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O(CVE-2026-45985)

    netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43190)

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

    ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()(CVE-2026-43186)

    media: saa7164: add ioremap return checks and cleanups(CVE-2026-46235)

    l2tp: Drop large packets with UDP encap(CVE-2026-43080)

    md/raid5: validate payload size before accessing journal metadata(CVE-2026-46070)

    smb: client: fix in-place encryption corruption in SMB2_write()(CVE-2026-43362)

    drm/display/dp_mst: Add protection against 0 vcpi(CVE-2025-71305)

    x86-64: rename misleadingly named '__copy_user_nocache()' function(CVE-2026-43073)

    serial: 8250: Fix TX deadlock when using DMA(CVE-2026-43061)

    md raid: fix hang when stopping arrays with metadata through dm-raid(CVE-2026-43309)

    iommu/vt-d: Clear Present bit before tearing down context entry(CVE-2026-45944)

    netfilter: nft_ct: drop pending enqueued packets on removal(CVE-2026-43060)

    xfrm: always flush state and policy upon NETDEV_UNREGISTER event(CVE-2026-43167)

    KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT(CVE-2026-46032)

    nfsd: never defer requests during idmap lookup(CVE-2026-45983)

    exit: prevent preemption of oopsing TASK_DEAD task(CVE-2026-46173)

    md/raid10: fix divide-by-zero in setup_geo() with zero far_copies(CVE-2026-46161)

    APEI/GHES: ARM processor Error: don't go past allocated memory(CVE-2026-43201)

    netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

    net: consume xmit errors of GSO frames(CVE-2026-43194)

    net/mlx5: lag: Check for LAG device before creating debugfs(CVE-2026-43013)

    net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-     leak(CVE-2026-43035)

    ipmi: Add limits to event and receive message requests(CVE-2026-46177)

    nouveau/dpcd: return EBUSY for aux xfer if the device is asleep(CVE-2026-43381)

    perf: sched: Fix perf crash with new is_user_task() helper(CVE-2026-23159)

    netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

    mmc: core: Avoid bitfield RMW for claim/retune flags(CVE-2026-43484)

    unshare: fix unshare_fs() handling(CVE-2026-43472)

    net: strparser: fix skb_head leak in strp_abort_strp()(CVE-2026-46102)

    vsock/virtio: fix accept queue count leak on transport mismatch(CVE-2026-46214)

    scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()(CVE-2026-46149)

    scsi: sd: fix missing put_disk() when device_add(disk_dev) fails(CVE-2026-45997)

    crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption(CVE-2026-43033)

    smb: client: require a full NFS mode SID before reading mode bits(CVE-2026-43350)

    xfrm_user: fix info leak in build_mapping()(CVE-2026-43089)

    ext4: drop extent cache when splitting extent fails(CVE-2026-45899)

    net/mlx5: Fix deadlock between devlink lock and esw-wq(CVE-2026-43468)

    smb: client: validate the whole DACL before rewriting it in cifsacl(CVE-2026-31709)

    ip6_tunnel: clear skb2-cb[] in ip4ip6_err()(CVE-2026-43037)

    net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback(CVE-2026-43057)

    ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()(CVE-2026-43101)

    netfilter: ctnetlink: ignore explicit helper on new expectations(CVE-2026-43025)

    net: Drop the lock in skb_may_tx_timestamp()(CVE-2026-43216)

    dm mirror: fix integer overflow in create_dirty_log()(CVE-2026-46023)

    usb: image: mdc800: kill download URB on timeout(CVE-2026-43425)

    netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path(CVE-2026-43451)

    usb: class: cdc-wdm: fix reordering issue in read code path(CVE-2026-43427)

    net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()(CVE-2026-31700)

    smb/client: fix out-of-bounds read in symlink_data()(CVE-2026-46185)

    xsk: validate MTU against usable frame size on bind(CVE-2026-43092)

    fuse: reject oversized dirents in page cache(CVE-2026-31694)

    net: ioam6: fix OOB and missing lock(CVE-2026-43083)

    usb: usbtmc: Flush anchored URBs in usbtmc_release(CVE-2026-31758)

    usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl(CVE-2026-46167)

    ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths(CVE-2026-43066)

    ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-43339)

    net: hns3: fix double free issue for tx spare buffer(CVE-2026-45891)

    8021q: delete cleared egress QoS mappings(CVE-2026-46153)

    cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path(CVE-2026-43328)

    apparmor: fix NULL sock in aa_sock_file_perm(CVE-2026-45848)

    net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo(CVE-2026-46132)

    usb: usblp: fix heap leak in IEEE 1284 device ID via short response(CVE-2026-46151)

    xfs: delete attr leaf freemap entries when empty(CVE-2026-43187)

    PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

    pstore/ram: fix buffer overflow in persistent_ram_save_old()(CVE-2026-46253)

    ima: verify the previous kernel's IMA buffer lies in addressable RAM(CVE-2026-43129)

    net: bridge: use a stable FDB dst snapshot in RCU readers(CVE-2026-46086)

    iommu/vt-d: Flush cache for PASID table before using it(CVE-2026-45862)

    KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding(CVE-2026-43315)

    xfrm: ah: account for ESN high bits in async callbacks(CVE-2026-46193)

    ext4: don't cache extent during splitting extent(CVE-2026-45912)

    io_uring/kbuf: check if target buffer list is still legacy on recycle(CVE-2026-43366)

    ipvs: fix NULL deref in ip_vs_add_service error path(CVE-2026-43086)

    md/raid5: fix soft lockup in retry_aligned_read()(CVE-2026-46051)

    ipmi:si: Return state to normal if message allocation fails(CVE-2026-46108)

    isofs: validate Rock Ridge CE continuation extent against volume size(CVE-2026-46303)

    crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl(CVE-2026-43078)

    xfrm: account XFRMA_IF_ID in aevent size calculation(CVE-2026-43107)

    ext4: fix memory leak in ext4_ext_shift_extents()(CVE-2026-45948)

    xsk: tighten UMEM headroom validation to account for tailroom and min frame(CVE-2026-43093)

    drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()(CVE-2026-46209)

    eventfs: Hold eventfs_mutex and SRCU when remount walks events(CVE-2026-46106)

    udf: fix partition descriptor append bookkeeping(CVE-2026-45991)

    md/bitmap: fix GPF in write_page caused by resize race(CVE-2026-43163)

    xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

    procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46259)

    KVM: SVM: Add missing save/restore handling of LBR MSRs(CVE-2026-46014)

    apparmor: fix invalid deref of rawdata when export_binary is unset(CVE-2026-45965)

    KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN(CVE-2026-46059)

    media: pvrusb2: fix URB leak in pvr2_send_request_ex(CVE-2026-43223)

    xprtrdma: Decrement re_receiving on the early exit paths(CVE-2026-43469)

    tcp: fix potential race in tcp_v6_syn_recv_sock()(CVE-2026-43198)

    x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache(CVE-2026-46174)

    netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43028)

    dlm: validate length in dlm_search_rsb_tree(CVE-2026-43125)

    ipvs: do not keep dest_dst if dev is going down(CVE-2026-45917)

    ipv4: icmp: fix null-ptr-deref in icmp_build_probe()(CVE-2026-43099)

    eventpoll: fix ep_remove struct eventpoll / struct file UAF(CVE-2026-46242)

    RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()(CVE-2026-46181)

    drm/nouveau: fix u32 overflow in pushbuf reloc bounds check(CVE-2026-46006)

    ata: libata-scsi: avoid Non-NCQ command starvation(CVE-2026-45855)

    net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-43441)

    drm/amd/display: Fix dc_link NULL handling in HPD init(CVE-2026-46245)

    fbcon: Avoid OOB font access if console rotation fails(CVE-2026-46191)

    net: remove WARN_ON_ONCE when accessing forward path array(CVE-2026-45847)

    xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path(CVE-2026-45905)

    xfs: fix a resource leak in xfs_alloc_buftarg()(CVE-2026-46005)

    net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery(CVE-2026-43466)

    HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()(CVE-2026-43136)

    mm/page_alloc: clear page-private in free_pages_prepare()(CVE-2026-43303)

    crypto: authencesn - reject short ahash digests during instance creation(CVE-2026-46033)

    eventpoll: defer struct eventpoll free to RCU grace period(CVE-2026-43074)

    cpuidle: Skip governor when only one idle state is available(CVE-2026-45968)

    netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()(CVE-2026-43453)

    crypto: algif_aead - Fix minimum RX size check for decryption(CVE-2026-43077)

    cgroup: fix race between task migration and iteration(CVE-2026-43439)

    thermal: core: Fix thermal zone governor cleanup issues(CVE-2026-46021)

    scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT(CVE-2026-43475)

    quota: fix livelock between quotactl and freeze_super(CVE-2026-45895)

    net/ipv6: ioam6: prevent schema length wraparound in trace fill(CVE-2026-43341)

    KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2(CVE-2026-45987)

    dm-thin: fix metadata refcount underflow(CVE-2026-46107)

    flow_dissector: do not dissect PPPoE PFC frames(CVE-2026-46306)

    RDMA/hns: Fix unlocked call to hns_roce_qp_remove()(CVE-2026-46112)

    netfilter: ctnetlink: ensure safe access to master conntrack(CVE-2026-43116)

    ext4: fix e4b bitmap inconsistency reports(CVE-2026-45942)

    smb: client: use kzalloc to zero-initialize security descriptor buffer(CVE-2026-46139)

    EFI/CPER: don't go past the ARM processor CPER record buffer(CVE-2026-43266)

    nvmet-tcp: fix race between ICReq handling and queue teardown(CVE-2026-46135)

    netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry(CVE-2026-43114)

    (CVE-2026-46320)

    ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()(CVE-2026-46046)

    SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path(CVE-2026-45964)

    ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()(CVE-2026-46172)

    dm: fix a buffer overflow in ioctl processing(CVE-2026-46294)

    ext4: drop extent cache after doing PARTIAL_VALID1 zeroout(CVE-2026-45892)

    SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths(CVE-2026-45870)

    sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-46227)

    x86/kexec: add a sanity check on previous kernel's ima kexec buffer(CVE-2026-43240)

    Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV'(CVE-2026-43147)

    netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets(CVE-2026-45873)

    xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete(CVE-2026-46116)

    spi: fix resource leaks on device setup failure(CVE-2026-46083)

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()(CVE-2026-43281)

    fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info(CVE-2026-46065)

    inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails(CVE-2026-46040)

    smb/client: fix out-of-bounds read in smb2_compound_op()(CVE-2026-46155)

    vxlan: validate ND option lengths in vxlan_na_create(CVE-2026-31738)

    drm: Account property blob allocations to memcg(CVE-2026-43287)

    crypto: algif_aead - snapshot IV for async AEAD requests(CVE-2026-46028)

    netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator(CVE-2026-43085)

    netfilter: nf_tables: reject immediate NF_QUEUE verdict(CVE-2026-43024)

    scsi: csiostor: Fix dereference of null pointer rn(CVE-2026-45857)

    bonding: alb: fix UAF in rlb_arp_recv during bond up/down(CVE-2026-45970)

    usb: xhci: Fix memory leak in xhci_disable_slot()(CVE-2026-43432)

    bpf: Fix tcx/netkit detach permissions when prog fd isn't given(CVE-2026-45932)

    netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO(CVE-2026-45841)

    ext4: fix dirtyclusters double decrement on fs shutdown(CVE-2026-45920)

    slip: bound decode() reads against the compressed packet length(CVE-2026-45843)

    net: use skb_header_pointer() for TCPv4 GSO frag_off check(CVE-2026-43036)

    net: bridge: mcast: always update mdb_n_entries for vlan contexts(CVE-2026-45913)

    net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-     leak(CVE-2026-43040)

    bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()(CVE-2026-45839)

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode(CVE-2026-43130)

    PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails(CVE-2026-45880)

    bpf: fix end-of-list detection in cgroup_storage_get_next_key()(CVE-2026-45838)

    ipvs: skip ipv6 extension headers for csum checks(CVE-2026-45850)

    netfilter: reject zero shift in nft_bitwise(CVE-2026-46101)

    RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send(CVE-2026-45856)

    sched/fair: Fix zero_vruntime tracking fix(CVE-2026-43323)

    crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed(CVE-2026-31699)

    netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent(CVE-2026-43026)

    net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ(CVE-2026-43464)

    isofs: validate block number from NFS file handle in isofs_export_iget(CVE-2026-46124)

    ipmi:ssif: Clean up kthread on errors(CVE-2026-46044)

    erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()(CVE-2026-45999)

    ipv6: rpl: reserve mac_len headroom when recompressed SRH grows(CVE-2026-43501)

    erofs: fix inline data read failure for ztailpacking pclusters(CVE-2026-45943)

    erofs: fix the out-of-bounds nameoff handling for trailing dirents(CVE-2026-46078)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4717 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4717-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     August 05, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.262-1     CVE ID         : CVE-2022-49803 CVE-2022-50114 CVE-2023-52494 CVE-2025-23131                      CVE-2025-39931 CVE-2026-23204 CVE-2026-31451 CVE-2026-31755                      CVE-2026-43216 CVE-2026-43219 CVE-2026-43499 CVE-2026-46116                      CVE-2026-46135 CVE-2026-46252 CVE-2026-46331 CVE-2026-52942                      CVE-2026-53138 CVE-2026-53157 CVE-2026-53158 CVE-2026-53159                      CVE-2026-53167 CVE-2026-53177 CVE-2026-53325 CVE-2026-53329                      CVE-2026-53332 CVE-2026-53381 CVE-2026-53382 CVE-2026-53385                      CVE-2026-53392 CVE-2026-53393 CVE-2026-53397 CVE-2026-53398                      CVE-2026-53399 CVE-2026-53400 CVE-2026-53402 CVE-2026-53403                      CVE-2026-63794 CVE-2026-63796 CVE-2026-63798 CVE-2026-63800                      CVE-2026-63801 CVE-2026-63803 CVE-2026-63806 CVE-2026-63808                      CVE-2026-63809 CVE-2026-63814 CVE-2026-63815 CVE-2026-63818                      CVE-2026-63822 CVE-2026-63823 CVE-2026-63824 CVE-2026-63827                      CVE-2026-63828 CVE-2026-63829 CVE-2026-63830 CVE-2026-63831                      CVE-2026-63834 CVE-2026-63835 CVE-2026-63836 CVE-2026-64188                      CVE-2026-64189 CVE-2026-64191 CVE-2026-64206 CVE-2026-64249                      CVE-2026-64252 CVE-2026-64266 CVE-2026-64268 CVE-2026-64271                      CVE-2026-64273 CVE-2026-64274 CVE-2026-64275 CVE-2026-64276                      CVE-2026-64277 CVE-2026-64296 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64303 CVE-2026-64304 CVE-2026-64306 CVE-2026-64312                      CVE-2026-64313 CVE-2026-64315 CVE-2026-64316 CVE-2026-64317                      CVE-2026-64318 CVE-2026-64322 CVE-2026-64323 CVE-2026-64324                      CVE-2026-64329 CVE-2026-64330 CVE-2026-64331 CVE-2026-64332                      CVE-2026-64333 CVE-2026-64334 CVE-2026-64335 CVE-2026-64337                      CVE-2026-64338 CVE-2026-64340 CVE-2026-64342 CVE-2026-64343                      CVE-2026-64344 CVE-2026-64345 CVE-2026-64347 CVE-2026-64348                      CVE-2026-64351 CVE-2026-64359 CVE-2026-64360 CVE-2026-64361                      CVE-2026-64362 CVE-2026-64363 CVE-2026-64364 CVE-2026-64370                      CVE-2026-64371 CVE-2026-64372 CVE-2026-64373 CVE-2026-64374                      CVE-2026-64375 CVE-2026-64378 CVE-2026-64379 CVE-2026-64380                      CVE-2026-64381 CVE-2026-64403 CVE-2026-64406 CVE-2026-64408                      CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64420                      CVE-2026-64422 CVE-2026-64423 CVE-2026-64425 CVE-2026-64429                      CVE-2026-64435 CVE-2026-64436 CVE-2026-64438 CVE-2026-64442                      CVE-2026-64445 CVE-2026-64446 CVE-2026-64448 CVE-2026-64450                      CVE-2026-64452 CVE-2026-64455 CVE-2026-64456 CVE-2026-64461                      CVE-2026-64462 CVE-2026-64465 CVE-2026-64468 CVE-2026-64469                      CVE-2026-64470 CVE-2026-64471 CVE-2026-64475 CVE-2026-64478                      CVE-2026-64483 CVE-2026-64484 CVE-2026-64487 CVE-2026-64488                      CVE-2026-64494 CVE-2026-64495 CVE-2026-64496 CVE-2026-64497                      CVE-2026-64500 CVE-2026-64503 CVE-2026-64504 CVE-2026-64505                      CVE-2026-64510 CVE-2026-64514 CVE-2026-64529 CVE-2026-64534                      CVE-2026-64538 CVE-2026-64540 CVE-2026-64541 CVE-2026-64544                      CVE-2026-64546 CVE-2026-64547 CVE-2026-64548 CVE-2026-64549                      CVE-2026-64550 CVE-2026-64551 CVE-2026-64553 CVE-2026-64554                      CVE-2026-64560

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.262-1. This version additionally includes many more bug fixes     from stable updates 5.10.260-5.10.262.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
365459	Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-8876-1)	Nessus	Ubuntu Local Security Checks	2026/10/13	2026/10/13	high
365522	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8917-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium
343048	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500249)	Nessus	Oracle Linux Local Security Checks	2026/9/4	2026/10/21	high
346773	EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3807)	Nessus	Huawei Local Security Checks	2026/9/17	2026/9/18	high
343617	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/23	high
339249	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-3216)	Nessus	Huawei Local Security Checks	2026/8/25	2026/10/23	high
337224	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-129)	Nessus	Amazon Linux Local Security Checks	2026/8/18	2026/9/10	high
332715	Debian dla-4717 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	2026/8/5	2026/9/23	high
341024	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3790-1)	Nessus	SuSE Local Security Checks	2026/8/27	2026/9/29	high

检测

插件搜索

high

medium

high

high

high

high

high

high

high