Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - drbd修复本地读取错误中的空指针取消引用在 drbd_request_endio() 中READ_COMPLETED_WITH_ERROR 被传递到具有空 peer_device 的 __req_mod()__req_mod(req, what, NULL, &m); READ_COMPLETED_WITH_ERROR 处理程序随后无条件将此空 peer_device 传递至 drbd_set_out_of_sync()后者将其取消引用从而造成空指针取消引用。通过 first_peer_device(device) 获取 peer_device以此匹配 drbd_req_destroy() 处理相同情况的方式修复此问题。
    (CVE-2026-23285)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

因此，该软件受到 ALAS2023-2026-1543 公告中提及的多个漏洞影响。

    在 Linux 内核中，以下漏洞已修复：

    fs/xattrfremovexattr 错误路径中缺少 fdput() (CVE-2024-14027)

    在 Linux 内核中，以下漏洞已修复：

    audit添加 fchmodat2() 以更改属性类 (CVE-2025-71239)

    在 Linux 内核中，以下漏洞已修复：

    fsntfs3修复不一致的元数据中 attr_load_runs_range 中的无限循环 (CVE-2025-71265)

    在 Linux 内核中，以下漏洞已修复：

    fsntfs3检查 indx_find 的返回值以避免无限循环CVE-2025-71266]

    在 Linux 内核中，以下漏洞已修复：

    fsntfs3修复由零大小的 ATTR_LIST 触发的无限循环CVE-2025-71267]

    在 Linux 内核中，以下漏洞已修复：

    btrfs严格要求元数据写入页面的脏元数据阈值 (CVE-2026-23157)

    在 Linux 内核中，以下漏洞已修复：

    netfilternf_tables修复 nf_tables_addchain() 中的释放后使用 (CVE-2026-23231)

    在 Linux 内核中，以下漏洞已修复：

    espintcp修复 espintcp_close() 中的争用条件 (CVE-2026-23239)

    在 Linux 内核中，以下漏洞已修复：

    tls修复 tls_sw_cancel_work_tx() 中的争用条件 (CVE-2026-23240)

    在 Linux 内核中，以下漏洞已修复：

    RDMA/umad拒绝 ib_umad_write 中的负 data_len (CVE-2026-23243)

    在 Linux 内核中，以下漏洞已修复：

    nvme修复 nvme_pr_read_keys() 中的内存分配 (CVE-2026-23244)

    在 Linux 内核中，以下漏洞已修复：

    xfs重新验证两个 btree 时检查已删除的光标 (CVE-2026-23249)

    在 Linux 内核中，以下漏洞已修复：

    net/sched仅允许act_ct绑定到 clsact/ingress qdisc 和共享块 (CVE-2026-23270)

    在 Linux 内核中，以下漏洞已修复：

    perf修复 __perf_event_overflow() 与 perf_remove_from_context() 争用CVE-2026-23271]

    在 Linux 内核中，以下漏洞已修复：

    macvlan观察 macvlan_common_newlink() 错误路径中的 RCU 宽限期 (CVE-2026-23273)

    在 Linux 内核中，以下漏洞已修复：

    drbd修复本地读取错误时的空指针取消引用 (CVE-2026-23285)

    在 Linux 内核中，以下漏洞已修复：

    scsitarget修复 __configfs_open_file() 中的递归锁定 (CVE-2026-23292)

    在 Linux 内核中，以下漏洞已修复：

    netvxlan修复禁用了 IPv6 时的 nd_tbl 空取消引用 (CVE-2026-23293)

    在 Linux 内核中，以下漏洞已修复：

    scsicore修复 tagset_refcnt 的 refcount 泄漏 (CVE-2026-23296)

    在 Linux 内核中，以下漏洞已修复：

    nfsd修复 nfsd_nl_threads_set_doit() 中的 cred ref 泄漏。 (CVE-2026-23297)

    在 Linux 内核中，以下漏洞已修复：

    netipv6修复了 IPv4 路由引用环回 IPv6 nexthop 时的错误CVE-2026-23300

    在 Linux 内核中，以下漏洞已修复：

    smb客户端不记录 cifs_set_cifscreds 中的明文凭据 (CVE-2026-23303)

    在 Linux 内核中，以下漏洞已修复：

    ipv6修复 ip6_rt_get_dev_rcu() 中的空指针取消引用 (CVE-2026-23304)

    在 Linux 内核中，以下漏洞已修复：

    bpf/bonding加载 XDP 时拒绝 vlan+srcmac xmit_hash_policy 更改 (CVE-2026-23310)

    在 Linux 内核中，以下漏洞已修复：

    i40e修复 napi 轮询跟踪点中的 preempt 计数泄漏 (CVE-2026-23313)

    在 Linux 内核中，以下漏洞已修复：

    netipv4修复多路径哈希种子中的 ARM64 对齐错误 (CVE-2026-23316)

    在 Linux 内核中，以下漏洞已修复：

    drm/vmwgfx返回 vmw_translate_ptr 函数中的正确值 (CVE-2026-23317)

    在 Linux 内核中，以下漏洞已修复：

    bpf修复 bpf_trampoline_link_cgroup_shim 中的 UAF 问题 (CVE-2026-23319)

    在 Linux 内核中，以下漏洞已修复：

    RDMA/irdma修复 irdma_create_user_ah() 中的内核堆栈泄漏 (CVE-2026-23335)

    在 Linux 内核中，以下漏洞已修复：

    net: sched避免无锁 qdiscs 的 qdisc_reset_all_tx_gt() 与出列争用 (CVE-2026-23340)

    在 Linux 内核中，以下漏洞已修复：

    xdp当计算的 tailroom 为负时生成警告 (CVE-2026-23343)

    在 Linux 内核中，以下漏洞已修复：

    netfilternft_set_pipapo将 gc 拆分为取消链接和回收阶段 (CVE-2026-23351)

    在 Linux 内核中，以下漏洞已修复：

    x86/efi延迟释放引导服务内存 (CVE-2026-23352)

    在 Linux 内核中，以下漏洞已修复：

    x86/fred修正 fred_extint() 中的推测安全 (CVE-2026-23354)

    在 Linux 内核中，以下漏洞已修复：

    drbd修复了 drbd_al_begin_io_nonblock() 中的逻辑缺陷 (CVE-2026-23356)

    在 Linux 内核中，以下漏洞已修复：

    bpf修复 devmap 中的堆栈越界写入 (CVE-2026-23359)

    在 Linux 内核中，以下漏洞已修复：

    nvme修复控制器重置时的管理队列泄漏 (CVE-2026-23360)

    在 Linux 内核中，以下漏洞已修复：

    PCIdwcep在取消映射其 ATU 条目之前刷新 MSI-X 写入 (CVE-2026-23361)

    在 Linux 内核中，以下漏洞已修复：

    canbcm修复对 bcm_op 运行时更新的锁定 (CVE-2026-23362)

    在 Linux 内核中，以下漏洞已修复：

    i2ci801恢复 i2ci801将 acpi_lock 替换为 I2C 总线锁定 (CVE-2026-23369)

    在 Linux 内核中，以下漏洞已修复：

    net/schedets修复卸载路径中的除以零 (CVE-2026-23379)

    在 Linux 内核中，以下漏洞已修复：

    tracing修复 tracing_buffers_mmap_close 中的 WARN_ON (CVE-2026-23380)

    在 Linux 内核中，以下漏洞已修复：

    netbridge修复禁用了 IPv6 时的 nd_tbl NULL 取消引用 (CVE-2026-23381)

    在 Linux 内核中，以下漏洞已修复：

    bpfarm64强制 8 字节对齐 JIT 缓冲区以防止原子性拆分 (CVE-2026-23383)

    在 Linux 内核中，以下漏洞已修复：

    Squashfs检查元数据块偏移是否在范围内 (CVE-2026-23388)

    在 Linux 内核中，以下漏洞已修复：

    net/rds修复 rds_tcp_tune 中的循环锁定依赖关系 (CVE-2026-23419)

Tenable 已直接从测试产品的安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - drbd修正本機讀取錯誤上的 null 指標解除參照。在 drbd_request_endio() 中READ_COMPLETED_WITH_ERROR 會以 NULL peer_device __req_mod(req, what, NULL, &m); 傳送至 __req_mod() READ_COMPLETED_WITH_ERROR 處置程式會無條件將此 NULL peer_device 傳送至 drbd_set_out_of_sync()並予以解除參照進而造成 null 指標解除參照。透過 first_peer_device(device) 取得 peer_device 來修正此問題符合 drbd_req_destroy() 處理相同情況的方式。
    (CVE-2026-23285)

請注意，Nessus 依賴供應商報告的套件存在。

因此，會受到 ALAS2023-2026-1543 公告中所提及的多個弱點影響。

    在 Linux 核心中，下列弱點已解決：

    fs/xattrfremovexattr 錯誤路徑中遺漏 fdput() (CVE-2024-14027)

    在 Linux 核心中，下列弱點已解決：

    audit新增 fchmodat2() 以變更屬性類別 (CVE-2025-71239)

    在 Linux 核心中，下列弱點已解決：

    fsntfs3修正不一致中繼資料上 attr_load_runs_range 中的無限迴圈 (CVE-2025-71265)

    在 Linux 核心中，下列弱點已解決：

    fsntfs3檢查 indx_find 的傳回值以避免無限迴圈 (CVE-2025-71266)

    在 Linux 核心中，下列弱點已解決：

    fsntfs3修正由零大小的 ATTR_LIST 觸發的無限迴圈 (CVE-2025-71267)

    在 Linux 核心中，下列弱點已解決：

    btrfs不嚴格要求詮釋資料寫入頁面的已變更詮釋資料閾值 (CVE-2026-23157)

    在 Linux 核心中，下列弱點已解決：

    netfilternf_tables修正 nf_tables_addchain() 中的釋放後使用 (CVE-2026-23231)

    在 Linux 核心中，下列弱點已解決：

    espintcp修正 espintcp_close() 中的爭用情形 (CVE-2026-23239)

    在 Linux 核心中，下列弱點已解決：

    tls修正 tls_sw_cancel_work_tx() 中的爭用情形 (CVE-2026-23240)

    在 Linux 核心中，下列弱點已解決：

    RDMA/umad拒絕 ib_umad_write 中的負 data_len (CVE-2026-23243)

    在 Linux 核心中，下列弱點已解決：

    nvme修正 nvme_pr_read_keys() 中的記憶體配置 (CVE-2026-23244)

    在 Linux 核心中，下列弱點已解決：

    xfs重新驗證兩個 btree 時檢查刪除的游標 (CVE-2026-23249)

    在 Linux 核心中，下列弱點已解決：

    net/sched僅允許act_ct 系結至 clsact/ingress qdiscs 和共用區塊 (CVE-2026-23270)

    在 Linux 核心中，下列弱點已解決：

    perf修正 __perf_event_overflow() 與 perf_remove_from_context() 爭用 (CVE-2026-23271)

    在 Linux 核心中，下列弱點已解決：

    macvlan在 macvlan_common_newlink() 錯誤路徑中觀察 RCU 寬限期 (CVE-2026-23273)

    在 Linux 核心中，下列弱點已解決：

    drbd修正本機讀取錯誤上的 null 指標解除參照 (CVE-2026-23285)

    在 Linux 核心中，下列弱點已解決：

    scsi目標修正 __configfs_open_file() 中的遞回鎖定 (CVE-2026-23292)

    在 Linux 核心中，下列弱點已解決：

    netvxlanIPv6 停用時修正 nd_tbl NULL 解除參照 (CVE-2026-23293)

    在 Linux 核心中，下列弱點已解決：

    scsi核心修正 tagset_refcnt 的 refcount 洩漏 (CVE-2026-23296)

    在 Linux 核心中，下列弱點已解決：

    nfsd修正 nfsd_nl_threads_set_doit() 中的 cred ref 洩漏。 (CVE-2026-23297)

    在 Linux 核心中，下列弱點已解決：

    netipv6修正 IPv4 路由參照回送 IPv6 nexthop 時發生的錯誤 (CVE-2026-23300)

    在 Linux 核心中，下列弱點已解決：

    smb用戶端不將純文字認證記錄在 cifs_set_cifscreds 中 (CVE-2026-23303)

    在 Linux 核心中，下列弱點已解決：

    ipv6修正 ip6_rt_get_dev_rcu() 中的 NULL 指標解除參照 (CVE-2026-23304)

    在 Linux 核心中，下列弱點已解決：

    bpf/bonding當載入 XDP 時拒絕 vlan+srcmac xmit_hash_policy 變更 (CVE-2026-23310)

    在 Linux 核心中，下列弱點已解決：

    i40e修正 napi 輪詢追踪點中的先佔計數洩漏 (CVE-2026-23313)

    在 Linux 核心中，下列弱點已解決：

    netipv4修正 ARM64 多重路徑雜湊種子中的對齊錯誤 (CVE-2026-23316)

    在 Linux 核心中，下列弱點已解決：

    drm/vmwgfx在 vmw_translate_ptr 函式中傳回正確值 (CVE-2026-23317)

    在 Linux 核心中，下列弱點已解決：

    bpf修正 bpf_trampoline_link_cgroup_shim 中的一個 UAF 問題 (CVE-2026-23319)

    在 Linux 核心中，下列弱點已解決：

    RDMA/irdma修正 irdma_create_user_ah() 中的核心堆疊洩漏 (CVE-2026-23335)

    在 Linux 核心中，下列弱點已解決：

    netsched避免無鎖定 qdisc 的 qdisc_reset_all_tx_gt() 與 dequeue 爭用 (CVE-2026-23340)

    在 Linux 核心中，下列弱點已解決：

    xdp當計算出的 tailroom 為負數時產生警告 (CVE-2026-23343)

    在 Linux 核心中，下列弱點已解決：

    netfilternft_set_pipapo將 gc 分割為取消連結和回收階段 (CVE-2026-23351)

    在 Linux 核心中，下列弱點已解決：

    x86/efi延遲釋放開機服務記憶體 (CVE-2026-23352)

    在 Linux 核心中，下列弱點已解決：

    x86/fred更正 fred_extint() 中的推測安全性 (CVE-2026-23354)

    在 Linux 核心中，下列弱點已解決：

    drbd修正 drbd_al_begin_io_nonblock() 中的邏輯錯誤 (CVE-2026-23356)

    在 Linux 核心中，下列弱點已解決：

    bpf修正 devmap 中的堆疊超出邊界寫入 (CVE-2026-23359)

    在 Linux 核心中，下列弱點已解決：

    nvme修正控制器重設時的管理佇列洩漏 (CVE-2026-23360)

    在 Linux 核心中，下列弱點已解決：

    PCIdwcep在取消對應其 ATU 項目前排清 MSI-X 寫入 (CVE-2026-23361)

    在 Linux 核心中，下列弱點已解決：

    canbcm修正 bcm_op 運行時間更新的鎖定 (CVE-2026-23362)

    在 Linux 核心中，下列弱點已解決：

    i2ci801還原 i2ci801以 I2C 匯流排鎖定取代 acpi_lock (CVE-2026-23369)

    在 Linux 核心中，下列弱點已解決：

    net/schedets修正卸載路徑中的除以零問題 (CVE-2026-23379)

    在 Linux 核心中，下列弱點已解決：

    tracing修正 tracing_buffers_mmap_close 中的 WARN_ON (CVE-2026-23380)

    在 Linux 核心中，下列弱點已解決：

    netbridge修正 IPv6 停用時的 nd_tbl NULL 解除參照 (CVE-2026-23381)

    在 Linux 核心中，下列弱點已解決：

    bpf、arm64強制 JIT 緩衝區的 8 位元組對齊以防止不可部分完成損毀 (CVE-2026-23383)

    在 Linux 核心中，下列弱點已解決：

    Squashfs檢查詮釋資料區塊位移是否在範圍內 (CVE-2026-23388)

    在 Linux 核心中，下列弱點已解決：

    net/rds修正 rds_tcp_tune 中的循環鎖定相依性 (CVE-2026-23419)

Tenable 已直接從所測試產品的安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - drbdローカル読み取りエラーの null ポインターデリファレンスを修正します。 drbd_request_endio() で、READ_COMPLETED_WITH_ERROR が NULL ピア_デバイスで __req_mod() に渡されます __req_mod(req, what, NULL, &m); READ_COMPLETED_WITH_ERROR ハンドラーは、この NULL ピアデバイスを drbd_set_out_of_sync() に無条件に渡し、これをデリファレンスし、null ポインターデリファレンスを引き起こします。first_peer_device(device) を通して peer_device を取得し、drbd_req_destroy() が同じ状況を処理する方法を一致させることで、これを修正します。
    (CVE-2026-23285)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

したがって、ALAS2023-2026-1543 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

    Linux カーネルで、以下の脆弱性が解決されています。

    fs/xattrfremovexattr エラーパスに fdput() がありませんCVE-2024-14027]

    Linux カーネルで、以下の脆弱性が解決されています。

    audit属性クラスを変更するために fchmodat2() を追加しますCVE-2025-71239]

    Linux カーネルで、以下の脆弱性が解決されています。

    fsntfs3一貫性のないメタデータでの attr_load_runs_range での無限ループを修正しますCVE-2025-71265

    Linux カーネルで、以下の脆弱性が解決されています。

    fsntfs3indx_find の戻り値をチェックし、無限ループを回避しますCVE-2025-71266

    Linux カーネルで、以下の脆弱性が解決されています。

    fsntfs3ゼロサイズの ATTR_LIST によって発生する無限ループを修正しますCVE-2025-71267

    Linux カーネルで、以下の脆弱性が解決されています。

    btrfsメタデータの書き込みページに対して、ダーティなメタデータのしきい値を厳密に要求しませんCVE-2026-23157

    Linux カーネルで、以下の脆弱性が解決されています。

    netfilternf_tablesnf_tables_addchain() の use-after-free を修正しますCVE-2026-23231

    Linux カーネルで、以下の脆弱性が解決されています。

    espintcpspintcp_close() の競合状態を修正CVE-2026-23239

    Linux カーネルで、以下の脆弱性が解決されています。

    tlstls_sw_cancel_work_tx() の競合状態を修正しますCVE-2026-23240

    Linux カーネルで、以下の脆弱性が解決されています。

    RDMA/umadib_umad_write 内の負の data_len を拒否しますCVE-2026-23243

    Linux カーネルで、以下の脆弱性が解決されています。

    nvmenvme_pr_read_keys() でのメモリ割り当てを修正しますCVE-2026-23244

    Linux カーネルで、以下の脆弱性が解決されています。

    xfs2 つの btree を再検証する際に、削除されたカーソルをチェックしますCVE-2026-23249

    Linux カーネルで、以下の脆弱性が解決されています。

    net/schedact_ct のみを clsact/ingress qdiscs および共有ブロックにバインドしますCVE-2026-23270

    Linux カーネルで、以下の脆弱性が解決されています。

    perf__perf_event_overflow() と perf_remove_from_context() の競合を修正しますCVE-2026-23271]

    Linux カーネルで、以下の脆弱性が解決されています。

    macvlanmacvlan_common_newlink() エラーパスで RCU の猶予期間を観察しますCVE-2026-23273

    Linux カーネルで、以下の脆弱性が解決されています。

    drbdローカル読み取りエラーの null ポインターデリファレンスを修正しますCVE-2026-23285

    Linux カーネルで、以下の脆弱性が解決されています。

    scsitarget__configfs_open_file() での再帰ロッキングを修正CVE-2026-23292]

    Linux カーネルで、以下の脆弱性が解決されています。

    netvxlanIPv6 が無効のときの nd_tbl NULL 逆参照を修正しますCVE-2026-23293

    Linux カーネルで、以下の脆弱性が解決されています。

    scsicoretagset_refcnt に対する refcount の漏洩を修正しますCVE-2026-23296

    Linux カーネルで、以下の脆弱性が解決されています。

    nfsdnfsd_nl_threads_set_doit() での cred ref 漏洩を修正します。CVE-2026-23297

    Linux カーネルで、以下の脆弱性が解決されています。

    netipv6IPv4 ルートが loopback IPv6 nexthop を参照する際のパニックを修正しますCVE-2026-23300

    Linux カーネルで、以下の脆弱性が解決されています。

    smbclientcifs_set_cifscreds で平文の認証情報を記録しませんCVE-2026-23303

    Linux カーネルで、以下の脆弱性が解決されています。

    ipv6ip6_rt_get_dev_rcu() での NULL ポインターデリファレンスを修正しますCVE-2026-23304]

    Linux カーネルで、以下の脆弱性が解決されています。

    bpf/bondingXDP がロードされる際に vlan+srcmac xmit_hash_policy の変更を拒否しますCVE-2026-23310

    Linux カーネルで、以下の脆弱性が解決されています。

    i40enapi ポーリングトレースポイントのプリエンプトカウントの漏洩を修正しますCVE-2026-23313

    Linux カーネルで、以下の脆弱性が解決されています。

    netipv4マルチパスハッシュシードでの [ ARM64 アライメント違反を修正 CVE-2026-23316

    Linux カーネルで、以下の脆弱性が解決されています。

    drm/vmwgfxvmw_translate_ptr 関数の正しい値を返しますCVE-2026-23317

    Linux カーネルで、以下の脆弱性が解決されています。

    bpfbpf_trampoline_link_cgroup_shim の UAF 問題を修正しますCVE-2026-23319

    Linux カーネルで、以下の脆弱性が解決されています。

    RDMA/irdmairdma_create_user_ah() のカーネルスタック漏洩を修正しますCVE-2026-23335

    Linux カーネルで、以下の脆弱性が解決されています。

    netschedロックのない qdiscs に対する qdisc_reset_all_tx_gt() と dequeue の競合を回避しますCVE-2026-23340]

    Linux カーネルで、以下の脆弱性が解決されています。

    xdp計算された tailroom が負である場合、警告を発しますCVE-2026-23343

    Linux カーネルで、以下の脆弱性が解決されています。

    netfilternft_set_pipapogc を unlink および reclaim フェーズに分割CVE-2026-23351

    Linux カーネルで、以下の脆弱性が解決されています。

    x86/efi起動サービスメモリの解放を延期しますCVE-2026-23352

    Linux カーネルで、以下の脆弱性が解決されています。

    x86/fredfred_extint() での投機的安全性を修正しますCVE-2026-23354]

    Linux カーネルで、以下の脆弱性が解決されています。

    drbddrbd_al_begin_io_nonblock() での LOGIC バグを修正しますCVE-2026-23356

    Linux カーネルで、以下の脆弱性が解決されています。

    bpfdevmap での stack-out-of-bounds 書き込みを修正しますCVE-2026-23359

    Linux カーネルで、以下の脆弱性が解決されています。

    nvmeコントローラーリセットでの管理者キューの漏洩を修正しますCVE-2026-23360

    Linux カーネルで、以下の脆弱性が解決されています。

    PCIdwcepATU エントリをアンマッピングする前に MSI-X 書き込みをフラッシュしますCVE-2026-23361

    Linux カーネルで、以下の脆弱性が解決されています。

    canbcmbcm_op runtime 更新のロックを修正CVE-2026-23362

    Linux カーネルで、以下の脆弱性が解決されています。

    i2ci801i2c を元に戻すi801acpi_lock を I2C バスロックで置き換えますCVE-2026-23369

    Linux カーネルで、以下の脆弱性が解決されています。

    net/schedetsオフロードパスのゼロ除算を修正しますCVE-2026-23379

    Linux カーネルで、以下の脆弱性が解決されています。

    tracingtracing_buffers_mmap_close の WARN_ON を修正しますCVE-2026-23380

    Linux カーネルで、以下の脆弱性が解決されています。

    netブリッジIPv6 が無効の場合の nd_tbl NULL 逆参照を修正しますCVE-2026-23381

    Linux カーネルで、以下の脆弱性が解決されています。

    bpf、arm64アトミックティアリングを防止するために JIT バッファに対して 8 バイトのアライメントを強制しますCVE-2026-23383

    Linux カーネルで、以下の脆弱性が解決されています。

    Squashfsメタデータブロックオフセットが範囲内であることをチェックCVE-2026-23388

    Linux カーネルで、以下の脆弱性が解決されています。

    net/rdsrds_tcp_tune での循環ロックの依存関係を修正しますCVE-2026-23419

Tenable は、前述の記述ブロックをテスト済み製品のセキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH_ERROR     is passed to __req_mod() with a NULL peer_device: __req_mod(req, what, NULL, &m); The     READ_COMPLETED_WITH_ERROR handler then unconditionally passes this NULL peer_device to     drbd_set_out_of_sync(), which dereferences it, causing a null-pointer dereference. Fix this by obtaining     the peer_device via first_peer_device(device), matching how drbd_req_destroy() handles the same situation.
    (CVE-2026-23285)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1543 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs/xattr: missing fdput() in fremovexattr error path (CVE-2024-14027)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: add fchmodat2() to change attributes class (CVE-2025-71239)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not strictly require dirty metadata threshold for metadata writepages (CVE-2026-23157)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CVE-2026-23231)

    In the Linux kernel, the following vulnerability has been resolved:

    espintcp: Fix race condition in espintcp_close() (CVE-2026-23239)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: Fix race condition in tls_sw_cancel_work_tx() (CVE-2026-23240)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umad: Reject negative data_len in ib_umad_write (CVE-2026-23243)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix memory allocation in nvme_pr_read_keys() (CVE-2026-23244)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: check for deleted cursors when revalidating two btrees (CVE-2026-23249)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CVE-2026-23270)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (CVE-2026-23271)

    In the Linux kernel, the following vulnerability has been resolved:

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path (CVE-2026-23273)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix null-pointer dereference on local read error (CVE-2026-23285)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: Fix recursive locking in __configfs_open_file() (CVE-2026-23292)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23293)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Fix refcount leak for tagset_refcnt (CVE-2026-23296)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (CVE-2026-23297)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (CVE-2026-23300)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Don't log plaintext credentials in cifs_set_cifscreds (CVE-2026-23303)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (CVE-2026-23304)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (CVE-2026-23310)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix preempt count leak in napi poll tracepoint (CVE-2026-23313)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv4: fix ARM64 alignment fault in multipath hash seed (CVE-2026-23316)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (CVE-2026-23317)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (CVE-2026-23319)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (CVE-2026-23335)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (CVE-2026-23340)

    In the Linux kernel, the following vulnerability has been resolved:

    xdp: produce a warning when calculated tailroom is negative (CVE-2026-23343)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (CVE-2026-23351)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/efi: defer freeing of boot services memory (CVE-2026-23352)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/fred: Correct speculative safety in fred_extint() (CVE-2026-23354)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix LOGIC BUG in drbd_al_begin_io_nonblock() (CVE-2026-23356)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix stack-out-of-bounds write in devmap (CVE-2026-23359)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix admin queue leak on controller reset (CVE-2026-23360)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (CVE-2026-23361)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix locking for bcm_op runtime updates (CVE-2026-23362)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: i801: Revert i2c: i801: replace acpi_lock with I2C bus lock (CVE-2026-23369)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: ets: fix divide by zero in the offload path (CVE-2026-23379)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix WARN_ON in tracing_buffers_mmap_close (CVE-2026-23380)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23381)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (CVE-2026-23383)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check metadata block offset is within range (CVE-2026-23388)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Fix circular locking dependency in rds_tcp_tune (CVE-2026-23419)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1596 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix memory allocation in nvme_pr_read_keys() (CVE-2026-23244)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_gate: snapshot parameters with RCU on replace (CVE-2026-23245)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: secure_seq: add back ports to TS offset (CVE-2026-23247)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/core: Fix refcount bug and potential UAF in perf_mmap (CVE-2026-23248)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CVE-2026-23270)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (CVE-2026-23271)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: unconditionally bump set->nelems before insertion (CVE-2026-23272)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (CVE-2026-23274)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring: ensure ctx->rings is stable for task work flags manipulation (CVE-2026-23275)

    In the Linux kernel, the following vulnerability has been resolved:

    net: add xmit recursion limit to tunnel xmit functions (CVE-2026-23276)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (CVE-2026-23277)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: always walk all pending catchall elements (CVE-2026-23278)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix oops due to uninitialised var in smb2_unlink() (CVE-2026-23282)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix null-pointer dereference on local read error (CVE-2026-23285)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: Fix recursive locking in __configfs_open_file() (CVE-2026-23292)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23293)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix race in devmap on PREEMPT_RT (CVE-2026-23294)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Fix refcount leak for tagset_refcnt (CVE-2026-23296)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (CVE-2026-23297)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (CVE-2026-23300)

    In the Linux kernel, the following vulnerability has been resolved:

    net: annotate data-races around sk->sk_{data_ready,write_space} (CVE-2026-23302)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Don't log plaintext credentials in cifs_set_cifscreds (CVE-2026-23303)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (CVE-2026-23304)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Add NULL pointer check to trigger_data_free() (CVE-2026-23309)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (CVE-2026-23310)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/core: Fix invalid wait context in ctx_sched_in() (CVE-2026-23311)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix preempt count leak in napi poll tracepoint (CVE-2026-23313)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv4: fix ARM64 alignment fault in multipath hash seed (CVE-2026-23316)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (CVE-2026-23317)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (CVE-2026-23319)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: in-kernel: always mark signal+subflow endp as used (CVE-2026-23321)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Fix use-after-free and list corruption on sender error (CVE-2026-23322)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: Fix fragment node deletion to prevent buffer leak (CVE-2026-23326)

    In the Linux kernel, the following vulnerability has been resolved:

    libie: don't unroll if fwlog isn't supported (CVE-2026-23329)

    In the Linux kernel, the following vulnerability has been resolved:

    udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. (CVE-2026-23331)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: intel_pstate: Fix crash during turbo disable (CVE-2026-23332)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (CVE-2026-23340)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix race in cpumap on PREEMPT_RT (CVE-2026-23342)

    In the Linux kernel, the following vulnerability has been resolved:

    xdp: produce a warning when calculated tailroom is negative (CVE-2026-23343)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled (CVE-2026-23345)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: io: Extract user memory type in ioremap_prot() (CVE-2026-23346)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (CVE-2026-23351)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/efi: defer freeing of boot services memory (CVE-2026-23352)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/fred: Correct speculative safety in fred_extint() (CVE-2026-23354)

    In the Linux kernel, the following vulnerability has been resolved:

    ata: libata: cancel pending work after clearing deferred_qc (CVE-2026-23355)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix LOGIC BUG in drbd_al_begin_io_nonblock() (CVE-2026-23356)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix stack-out-of-bounds write in devmap (CVE-2026-23359)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix admin queue leak on controller reset (CVE-2026-23360)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix locking for bcm_op runtime updates (CVE-2026-23362)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/client: Do not destroy NULL modes (CVE-2026-23366)

    In the Linux kernel, the following vulnerability has been resolved:

    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (CVE-2026-23368)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: i801: Revert i2c: i801: replace acpi_lock with I2C bus lock (CVE-2026-23369)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix WARN_ON in tracing_buffers_mmap_close (CVE-2026-23380)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23381)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (CVE-2026-23383)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: clone set on flush only (CVE-2026-23385)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check metadata block offset is within range (CVE-2026-23388)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_CT: drop pending enqueued packets on template removal (CVE-2026-23391)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

    In the Linux kernel, the following vulnerability has been resolved:

    nfnetlink_osf: validate individual option lengths in fingerprints (CVE-2026-23397)

    In the Linux kernel, the following vulnerability has been resolved:

    icmp: fix NULL pointer dereference in icmp_tag_validation() (CVE-2026-23398)

    In the Linux kernel, the following vulnerability has been resolved:

    nf_tables: nft_dynset: fix possible stateful expression memleak in error path (CVE-2026-23399)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: bpf: defer hook memory release until rcu readers are done (CVE-2026-23412)

    In the Linux kernel, the following vulnerability has been resolved:

    clsact: Fix use-after-free in init/destroy rollback asymmetry (CVE-2026-23413)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Fix circular locking dependency in rds_tcp_tune (CVE-2026-23419)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: free pages on error in btrfs_uring_read_extent() (CVE-2026-23423)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Fix ID register initialization for non-protected pKVM guests (CVE-2026-23425)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/sva: Fix crash in iommu_sva_unbind_device() (CVE-2026-23429)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/vmwgfx: Don't overwrite KMS surface dirty tracker (CVE-2026-23430)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/x86: Move event pointer setup earlier in x86_pmu_enable() (CVE-2026-23435)

    In the Linux kernel, the following vulnerability has been resolved:

    net: shaper: protect from late creation of hierarchy (CVE-2026-23436)

    In the Linux kernel, the following vulnerability has been resolved:

    net: shaper: protect late read accesses to the hierarchy (CVE-2026-23437)

    In the Linux kernel, the following vulnerability has been resolved:

    udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (CVE-2026-23439)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Fix race condition during IPSec ESN update (CVE-2026-23440)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Prevent concurrent access to IPSec ASO context (CVE-2026-23441)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (CVE-2026-23443)

    In the Linux kernel, the following vulnerability has been resolved:

    igc: fix page fault in XDP TX timestamps handling (CVE-2026-23445)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: teql: Fix double-free in teql_master_xmit (CVE-2026-23449)

    In the Linux kernel, the following vulnerability has been resolved:

    PM: runtime: Fix a race condition related to device removal (CVE-2026-23452)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (CVE-2026-23456)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (CVE-2026-23457)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (CVE-2026-23458)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: log new dentries when logging parent dir of a conflicting inode (CVE-2026-23465)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (CVE-2026-23467)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (CVE-2026-23472)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/poll: fix multishot recv missing EOF on wakeup race (CVE-2026-23473)

    In the Linux kernel, the following vulnerability has been resolved:

    spi: fix statistics allocation (CVE-2026-23475)

    In the Linux kernel, the following vulnerability has been resolved:

    spi: fix use-after-free on controller registration failure (CVE-2026-31389)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix krb5 mount with username option (CVE-2026-31392)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() (CVE-2026-31397)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/rmap: fix incorrect pte restoration for lazyfree folios (CVE-2026-31398)

    In the Linux kernel, the following vulnerability has been resolved:

    nvdimm/bus: Fix potential use after free in asynchronous initialization (CVE-2026-31399)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: fix cache_request leak in cache_release (CVE-2026-31400)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (CVE-2026-31403)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Defer sub-object cleanup in export put callbacks (CVE-2026-31404)

    In the Linux kernel, the following vulnerability has been resolved:

    xen/privcmd: restrict usage in unprivileged domU (CVE-2026-31788)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6238 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6238-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 30, 2026                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-14027 CVE-2025-21709 CVE-2025-22116 CVE-2025-22117                      CVE-2025-38426 CVE-2025-38627 CVE-2025-39764 CVE-2025-40005                      CVE-2025-40135 CVE-2025-40147 CVE-2025-40150 CVE-2025-40219                      CVE-2025-68175 CVE-2025-68239 CVE-2025-68334 CVE-2025-68736                      CVE-2025-71152 CVE-2025-71161 CVE-2025-71221 CVE-2025-71239                      CVE-2025-71265 CVE-2025-71266 CVE-2025-71267 CVE-2025-71269                      CVE-2026-22981 CVE-2026-22985 CVE-2026-22986 CVE-2026-22993                      CVE-2026-23004 CVE-2026-23066 CVE-2026-23070 CVE-2026-23104                      CVE-2026-23138 CVE-2026-23157 CVE-2026-23207 CVE-2026-23210                      CVE-2026-23226 CVE-2026-23227 CVE-2026-23231 CVE-2026-23239                      CVE-2026-23240 CVE-2026-23242 CVE-2026-23243 CVE-2026-23244                      CVE-2026-23245 CVE-2026-23246 CVE-2026-23249 CVE-2026-23250                      CVE-2026-23251 CVE-2026-23252 CVE-2026-23253 CVE-2026-23255                      CVE-2026-23270 CVE-2026-23271 CVE-2026-23273 CVE-2026-23274                      CVE-2026-23276 CVE-2026-23277 CVE-2026-23278 CVE-2026-23279                      CVE-2026-23281 CVE-2026-23284 CVE-2026-23285 CVE-2026-23286                      CVE-2026-23287 CVE-2026-23289 CVE-2026-23290 CVE-2026-23291                      CVE-2026-23292 CVE-2026-23293 CVE-2026-23296 CVE-2026-23297                      CVE-2026-23298 CVE-2026-23300 CVE-2026-23302 CVE-2026-23303                      CVE-2026-23304 CVE-2026-23306 CVE-2026-23307 CVE-2026-23308                      CVE-2026-23310 CVE-2026-23312 CVE-2026-23313 CVE-2026-23315                      CVE-2026-23316 CVE-2026-23317 CVE-2026-23318 CVE-2026-23319                      CVE-2026-23321 CVE-2026-23324 CVE-2026-23325 CVE-2026-23330                      CVE-2026-23334 CVE-2026-23335 CVE-2026-23336 CVE-2026-23339                      CVE-2026-23340 CVE-2026-23343 CVE-2026-23347 CVE-2026-23351                      CVE-2026-23352 CVE-2026-23354 CVE-2026-23356 CVE-2026-23357                      CVE-2026-23359 CVE-2026-23360 CVE-2026-23361 CVE-2026-23362                      CVE-2026-23363 CVE-2026-23364 CVE-2026-23365 CVE-2026-23367                      CVE-2026-23368 CVE-2026-23369 CVE-2026-23370 CVE-2026-23372                      CVE-2026-23373 CVE-2026-23374 CVE-2026-23375 CVE-2026-23378                      CVE-2026-23379 CVE-2026-23380 CVE-2026-23381 CVE-2026-23382                      CVE-2026-23383 CVE-2026-23386 CVE-2026-23387 CVE-2026-23388                      CVE-2026-23389 CVE-2026-23391 CVE-2026-23392 CVE-2026-23393                      CVE-2026-23395 CVE-2026-23396 CVE-2026-23397 CVE-2026-23398                      CVE-2026-23399 CVE-2026-23401 CVE-2026-23412 CVE-2026-23413                      CVE-2026-23414 CVE-2026-23417 CVE-2026-23419 CVE-2026-23420                      CVE-2026-23422 CVE-2026-23426 CVE-2026-23427 CVE-2026-23428                      CVE-2026-23434 CVE-2026-23438 CVE-2026-23439 CVE-2026-23440                      CVE-2026-23441 CVE-2026-23442 CVE-2026-23444 CVE-2026-23445                      CVE-2026-23446 CVE-2026-23447 CVE-2026-23448 CVE-2026-23449                      CVE-2026-23450 CVE-2026-23452 CVE-2026-23454 CVE-2026-23455                      CVE-2026-23456 CVE-2026-23457 CVE-2026-23458 CVE-2026-23460                      CVE-2026-23461 CVE-2026-23462 CVE-2026-23463 CVE-2026-23464                      CVE-2026-23465 CVE-2026-23466 CVE-2026-23470 CVE-2026-23474                      CVE-2026-23475 CVE-2026-31389 CVE-2026-31391 CVE-2026-31392                      CVE-2026-31393 CVE-2026-31394 CVE-2026-31396 CVE-2026-31399                      CVE-2026-31400 CVE-2026-31401 CVE-2026-31402 CVE-2026-31403                      CVE-2026-31405 CVE-2026-31406 CVE-2026-31407 CVE-2026-31408                      CVE-2026-31409 CVE-2026-31410 CVE-2026-31411 CVE-2026-31412                      CVE-2026-31414 CVE-2026-31415 CVE-2026-31416 CVE-2026-31417                      CVE-2026-31418 CVE-2026-31421 CVE-2026-31422 CVE-2026-31423                      CVE-2026-31424 CVE-2026-31425 CVE-2026-31426 CVE-2026-31427                      CVE-2026-31428 CVE-2026-31429 CVE-2026-31430 CVE-2026-31431                      CVE-2026-31432 CVE-2026-31433 CVE-2026-31434 CVE-2026-31436                      CVE-2026-31438 CVE-2026-31439 CVE-2026-31440 CVE-2026-31441                      CVE-2026-31446 CVE-2026-31447 CVE-2026-31448 CVE-2026-31449                      CVE-2026-31450 CVE-2026-31451 CVE-2026-31452 CVE-2026-31453                      CVE-2026-31454 CVE-2026-31455 CVE-2026-31458 CVE-2026-31462                      CVE-2026-31464 CVE-2026-31466 CVE-2026-31467 CVE-2026-31469                      CVE-2026-31470 CVE-2026-31473 CVE-2026-31474 CVE-2026-31476                      CVE-2026-31477 CVE-2026-31478 CVE-2026-31479 CVE-2026-31480                      CVE-2026-31482 CVE-2026-31483 CVE-2026-31485 CVE-2026-31487                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31492 CVE-2026-31494                      CVE-2026-31495 CVE-2026-31496 CVE-2026-31497 CVE-2026-31498                      CVE-2026-31500 CVE-2026-31502 CVE-2026-31503 CVE-2026-31504                      CVE-2026-31505 CVE-2026-31506 CVE-2026-31507 CVE-2026-31508                      CVE-2026-31509 CVE-2026-31510 CVE-2026-31511 CVE-2026-31512                      CVE-2026-31515 CVE-2026-31516 CVE-2026-31518 CVE-2026-31519                      CVE-2026-31520 CVE-2026-31521 CVE-2026-31522 CVE-2026-31523                      CVE-2026-31524 CVE-2026-31525 CVE-2026-31527 CVE-2026-31528                      CVE-2026-31530 CVE-2026-31531 CVE-2026-31532 CVE-2026-31533                      CVE-2026-31540 CVE-2026-31542 CVE-2026-31545 CVE-2026-31546                      CVE-2026-31548 CVE-2026-31549 CVE-2026-31550 CVE-2026-31551                      CVE-2026-31552 CVE-2026-31554 CVE-2026-31555 CVE-2026-31556                      CVE-2026-31557 CVE-2026-31558 CVE-2026-31559 CVE-2026-31561                      CVE-2026-31563 CVE-2026-31565 CVE-2026-31566 CVE-2026-31570                      CVE-2026-31575 CVE-2026-31576 CVE-2026-31577 CVE-2026-31578                      CVE-2026-31580 CVE-2026-31581 CVE-2026-31582 CVE-2026-31583                      CVE-2026-31584 CVE-2026-31585 CVE-2026-31586 CVE-2026-31587                      CVE-2026-31588 CVE-2026-31590 CVE-2026-31593 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31604                      CVE-2026-31605 CVE-2026-31606 CVE-2026-31607 CVE-2026-31610                      CVE-2026-31611 CVE-2026-31612 CVE-2026-31614 CVE-2026-31615                      CVE-2026-31616 CVE-2026-31617 CVE-2026-31618 CVE-2026-31619                      CVE-2026-31622 CVE-2026-31623 CVE-2026-31624 CVE-2026-31625                      CVE-2026-31626 CVE-2026-31627 CVE-2026-31628 CVE-2026-31629                      CVE-2026-31634 CVE-2026-31637 CVE-2026-31638 CVE-2026-31639                      CVE-2026-31642 CVE-2026-31644 CVE-2026-31645 CVE-2026-31646                      CVE-2026-31647 CVE-2026-31648 CVE-2026-31649 CVE-2026-31651                      CVE-2026-31655 CVE-2026-31656 CVE-2026-31657 CVE-2026-31658                      CVE-2026-31659 CVE-2026-31660 CVE-2026-31661 CVE-2026-31662                      CVE-2026-31664 CVE-2026-31665 CVE-2026-31666 CVE-2026-31667                      CVE-2026-31668 CVE-2026-31669 CVE-2026-31670 CVE-2026-31671                      CVE-2026-31672 CVE-2026-31673 CVE-2026-31674 CVE-2026-31675                      CVE-2026-31676 CVE-2026-31677 CVE-2026-31678 CVE-2026-31679                      CVE-2026-31680 CVE-2026-31681 CVE-2026-31682 CVE-2026-31683                      CVE-2026-31684 CVE-2026-31685 CVE-2026-31686 CVE-2026-31689                      CVE-2026-31693 CVE-2026-31786 CVE-2026-31787 CVE-2026-31788

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.85-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
303704	Linux Distros 未修补的漏洞：CVE-2026-23285	Nessus	Misc.	2026/3/25	2026/3/28	medium
305231	Amazon Linux 2023 bpftool6.12、kernel6.12、kernel6.12-devel (ALAS2023-2026-1543)	Nessus	Amazon Linux Local Security Checks	2026/4/7	2026/4/27	high
303704	Linux Distros 未修補的弱點：CVE-2026-23285	Nessus	Misc.	2026/3/25	2026/3/28	medium
305231	Amazon Linux 2023bpftool6.12、kernel6.12、kernel6.12-devel (ALAS2023-2026-1543)	Nessus	Amazon Linux Local Security Checks	2026/4/7	2026/4/27	high
303704	Linux Distros のパッチ未適用の脆弱性: CVE-2026-23285	Nessus	Misc.	2026/3/25	2026/3/28	medium
305231	Amazon Linux 2023bpftool6.12、kernel6.12、kernel6.12-develALAS2023-2026-1543]	Nessus	Amazon Linux Local Security Checks	2026/4/7	2026/4/27	high
303704	Linux Distros Unpatched Vulnerability : CVE-2026-23285	Nessus	Misc.	2026/3/25	2026/3/28	medium
305231	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1543)	Nessus	Amazon Linux Local Security Checks	2026/4/7	2026/4/27	high
311340	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)	Nessus	Amazon Linux Local Security Checks	2026/4/30	2026/4/30	high
311299	Debian dsa-6238 : ata-modules-6.12.74+deb13+1-armmp-di - security update	Nessus	Debian Local Security Checks	2026/4/30	2026/5/1	high

检测

插件搜索

medium

high

medium

high

medium

high

medium

high

high

high