The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8904-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - x86 architecture;

    - Intel NPU Driver;

    - Auxiliary display drivers;

    - Compressed RAM block device driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Mouse) drivers;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Texas Instruments network drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - Parport drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - NVIDIA Tegra SoC drivers;

    - SPI subsystem;

    - Trusted Execution Environment drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - USB Device Class drivers;

    - DesignWare USB2 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - USB over IP driver;

    - Framebuffer layer;

    - Ext4 file system;

    - FUSE (File system in Userspace);

    - File systems infrastructure;

    - SMB network file system;

    - Mellanox drivers;

    - Network traffic control;

    - Bluetooth subsystem;

    - IPv4 networking;

    - Netfilter;

    - IPv6 networking;

    - Network sockets;

    - XFRM subsystem;

    - IPC subsystem;

    - Signal handling mechanism;

    - Memory management;

    - 6LoWPAN network protocol;

    - IEEE 802 network protocols;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - Networking core;

    - Devlink API;

    - Ethtool driver;

    - Handshake API;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - NetLabel subsystem;

    - NFC subsystem;

    - Open vSwitch;

    - Qualcomm IPC Router (QRTR);

    - RDS protocol;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - ALSA framework;

    - Simple audio multiplexer codec driver;

    - Wolfson Microelectronics audio codecs;

    - KVM subsystem; (CVE-2025-68296, CVE-2025-68768, CVE-2026-23346, CVE-2026-31663, CVE-2026-43116,     CVE-2026-43219, CVE-2026-43240, CVE-2026-43303, CVE-2026-43311, CVE-2026-43331, CVE-2026-45850,     CVE-2026-45930, CVE-2026-46203, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322, CVE-2026-52908,     CVE-2026-52910, CVE-2026-52913, CVE-2026-52917, CVE-2026-52923, CVE-2026-52927, CVE-2026-52929,     CVE-2026-52930, CVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942, CVE-2026-52943,     CVE-2026-52944, CVE-2026-52947, CVE-2026-52948, CVE-2026-53080, CVE-2026-53132, CVE-2026-53133,     CVE-2026-53134, CVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138, CVE-2026-53140,     CVE-2026-53143, CVE-2026-53144, CVE-2026-53146, CVE-2026-53147, CVE-2026-53148, CVE-2026-53149,     CVE-2026-53150, CVE-2026-53154, CVE-2026-53156, CVE-2026-53158, CVE-2026-53159, CVE-2026-53160,     CVE-2026-53161, CVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53182, CVE-2026-53183,     CVE-2026-53184, CVE-2026-53185, CVE-2026-53190, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196,     CVE-2026-53198, CVE-2026-53199, CVE-2026-53202, CVE-2026-53205, CVE-2026-53208, CVE-2026-53209,     CVE-2026-53210, CVE-2026-53213, CVE-2026-53214, CVE-2026-53217, CVE-2026-53218, CVE-2026-53219,     CVE-2026-53220, CVE-2026-53223, CVE-2026-53227, CVE-2026-53229, CVE-2026-53230, CVE-2026-53232,     CVE-2026-53236, CVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53242, CVE-2026-53245,     CVE-2026-53249, CVE-2026-53251, CVE-2026-53252, CVE-2026-53253, CVE-2026-53254, CVE-2026-53255,     CVE-2026-53256, CVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264, CVE-2026-53265,     CVE-2026-53266, CVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53273,     CVE-2026-53274, CVE-2026-53275, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332, CVE-2026-53336,     CVE-2026-53337, CVE-2026-53339, CVE-2026-53343, CVE-2026-53345, CVE-2026-53347, CVE-2026-53349,     CVE-2026-53350, CVE-2026-53352, CVE-2026-53353, CVE-2026-53356, CVE-2026-53358, CVE-2026-63867,     CVE-2026-63868, CVE-2026-63869, CVE-2026-63870, CVE-2026-63871, CVE-2026-63875, CVE-2026-63876,     CVE-2026-63877, CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884, CVE-2026-63889,     CVE-2026-63890, CVE-2026-63891, CVE-2026-63892, CVE-2026-63893, CVE-2026-63895, CVE-2026-63896,     CVE-2026-63897, CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,     CVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63906, CVE-2026-63908, CVE-2026-63909,     CVE-2026-63913, CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63919,     CVE-2026-63920, CVE-2026-63921, CVE-2026-63925, CVE-2026-63926, CVE-2026-63927, CVE-2026-63928,     CVE-2026-63930, CVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942, CVE-2026-63943,     CVE-2026-63944, CVE-2026-63945, CVE-2026-63946, CVE-2026-63947, CVE-2026-63948, CVE-2026-63949,     CVE-2026-63952, CVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958, CVE-2026-63959,     CVE-2026-63960, CVE-2026-63961, CVE-2026-63964, CVE-2026-63967, CVE-2026-63968, CVE-2026-63969,     CVE-2026-63971, CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976, CVE-2026-63980,     CVE-2026-63985, CVE-2026-63990, CVE-2026-63991, CVE-2026-64001, CVE-2026-64002, CVE-2026-64003,     CVE-2026-64004, CVE-2026-64005, CVE-2026-64006, CVE-2026-64009, CVE-2026-64010, CVE-2026-64011,     CVE-2026-64012, CVE-2026-64014, CVE-2026-64026, CVE-2026-64090, CVE-2026-64093, CVE-2026-64094,     CVE-2026-64095, CVE-2026-64099, CVE-2026-64123, CVE-2026-64131, CVE-2026-64222, CVE-2026-64233,     CVE-2026-64234, CVE-2026-64237, CVE-2026-64239, CVE-2026-64240, CVE-2026-64242, CVE-2026-64243,     CVE-2026-64524, CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-72064, CVE-2026-72065,     CVE-2026-92502)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds     IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting the on-wire     hdrlen byte (ptr[1]) when computing the put_cmsg() length. The length was validated only at parse time     (ipv6_parse_hopopts(), etc.). An nftables payload-write expression can rewrite hdrlen after parsing and     before the skb reaches recvmsg; the write itself is in-bounds but put_cmsg() then reads up to ((hdrlen+1)     << 3) = 2040 bytes from an 8-byte header. nftables is reachable from an unprivileged user namespace, so     this is an unprivileged slab-out-of-bounds read: BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540     put_cmsg+0x3ac/0x540 udpv6_recvmsg+0xca0/0x1250 sock_recvmsg+0xdf/0x190 ____sys_recvmsg+0x1b1/0x620 Add     ipv6_get_exthdr_len() which validates that at least two bytes are accessible before reading the hdrlen     field, then checks the computed length against skb_tail_pointer(skb), returning 0 on failure. Extension     headers are kept in the linear skb area by pskb_may_pull() during input, so skb_tail_pointer() is the     correct bound. Use ipv6_get_exthdr_len() at all non-AH call sites: the five standalone cmsg blocks (HbH,     2292HbH, 2292DSTOPTS x2, 2292RTHDR) and the three standard cases in the extension-header walk loop     (DSTOPTS, ROUTING, default). AH retains an inline bounds check because its length formula differs     ((ptr[1]+2)<<2). The walk loop also gets a pre-read bounds check at the top to validate ptr before any     case accesses ptr[0] or ptr[1]. When the walk loop detects a corrupted header, return from the function     instead of continuing to process later socket options. (CVE-2026-63920)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4548-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues:

    The following security issues were fixed:

    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
    - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()     (bsc#1272391).
    - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
    - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
    - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
    - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4559-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues:

    The following security issues were fixed:

    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
    - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()     (bsc#1272391).
    - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
    - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
    - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
    - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82806 advisory.

    * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
      * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
      * kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
      * kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
      * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
      * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)
      * kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
      * kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4284-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405     bsc#1275784).
    - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944).
    - CVE-2026-53260: tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req() (bsc#1269731).
    - CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
    - CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
    - CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
    - CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
    - CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
    - CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
    - CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
    - CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
    - CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
    - CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
    - CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
    - CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
    - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830).
    - CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230).
    - CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182).
    - CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179).
    - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
    - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()     (bsc#1272390).
    - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
    - CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).
    - CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()     (bsc#1273774).
    - CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
    - CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
    - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
    - CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
    - CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).
    - CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).
    - CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).
    - CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
    - CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
    - CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276).
    - CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
    - CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422).
    - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
    - CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523).
    - CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547).
    - CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
    - CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311).
    - CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).
    - CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
    - CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995).
    - CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014).
    - CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).
    - CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
    - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).
    - CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474).
    - CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941).
    - CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
    - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
    - CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
    - CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472).
    - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).
    - CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).
    - CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).
    - CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696).
    - CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274705).
    - CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).
    - CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).
    - CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528).
    - CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
    - CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540).
    - CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523).
    - CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).
    - CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
    - CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).
    - CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling     (bsc#1275886).
    - CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905).
    - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
    - CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
    - CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).
    - CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285).
    - CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).
    - CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).
    - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
    - CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).
    - CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408).
    - CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).
    - CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).
    - CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).
    - CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).
    - CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798).
    - CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).
    - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer     (bsc#1275696).
    - CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784).
    - CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).
    - CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).
    - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).
    - CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()     (bsc#1276931).
    - CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
    - CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).
    - CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).
    - CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).
    - CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).
    - CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).

    The following non security issues were fixed:

    - mkspec-dtb: Move DTS prefix into package list.
    - mkspec-dtb: Move provides-obsoletes to package list.
    - mkspec-dtb: Put per-architecture package lists into a hash.
    - mkspec-dtb: re-indent.
    - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).
    - perf: Reject exited events as group leaders (git-fixes).
    - powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288     bsc#1274752       ltc#221290).
    - RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes).
    - RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes).
    - RDMA/siw: Introduce siw_free_cm_id (git-fixes).
    - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp (git-fixes).
    - smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).
    - smb: client: require net admin for CIFS SWN netlink (bsc#1273966).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4498-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues:

    The following security issues were fixed:

    - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
    - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()     (bsc#1272391).
    - CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
    - CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
    - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
    - CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
    - CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
    - CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
    - CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()     (bsc#1273051).
    - CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
    - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
    - CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
    - CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
    - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
    - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
    - CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
    - CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4518-1 advisory.

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.92 fixes various security issues:

    The following security issues were fixed:

    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).
    - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283).
    - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()     (bsc#1272391).
    - CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837).
    - CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015).
    - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).
    - CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011).
    - CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003).
    - CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679).
    - CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()     (bsc#1273051).
    - CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052).
    - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).
    - CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837).
    - CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208).
    - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).
    - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).
    - CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409).
    - CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77218 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)

    * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)

    * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

    * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

    * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)

    * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

    * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)

    * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

    * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

    * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

    * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)

    * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)

    * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84793 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

    * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

    * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
365376	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8904-1)	Nessus	Ubuntu Local Security Checks	2026/10/13	2026/10/13	high
328186	Linux Distros Unpatched Vulnerability : CVE-2026-63920	Nessus	Misc.	2026/7/20	2026/10/13	high
363785	SUSE SLES12 Security Update : kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4548-1)	Nessus	SuSE Local Security Checks	2026/10/7	2026/10/8	critical
364124	SUSE SLES12 Security Update : kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4559-1)	Nessus	SuSE Local Security Checks	2026/10/8	2026/10/9	critical
365609	AlmaLinux 8 : kernel-rt (ALSA-2026:82806)	Nessus	Alma Linux Local Security Checks	2026/10/14	2026/10/14	high
349184	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4284-1)	Nessus	SuSE Local Security Checks	2026/9/23	2026/9/27	high
363072	SUSE SLES15 Security Update : kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:4498-1)	Nessus	SuSE Local Security Checks	2026/10/6	2026/10/6	high
363772	SUSE SLES15: kernel-livepatch-6_4_0-150600_23_92-default / etc (SUSE-SU-2026:4518-1)	Nessus	SuSE Local Security Checks	2026/10/7	2026/10/7	high
365381	Ubuntu 22.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8877-1)	Nessus	Ubuntu Local Security Checks	2026/10/13	2026/10/13	high
363822	RHEL 9 : kernel (RHSA-2026:77218)	Nessus	Red Hat Local Security Checks	2026/10/7	2026/10/7	critical
367274	RHEL 8 : kernel (RHSA-2026:84793)	Nessus	Red Hat Local Security Checks	2026/10/19	2026/10/19	high

检测

插件搜索

high

high

critical

critical

high

high

high

high

high

critical

high