Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 Wayland 色彩管理 ICC 影像描述路徑的 mutter 中發現釋放後使用缺陷。本機攻擊者如果能執行惡意 Wayland 用戶端，就可以在非同步 ICC 檔案讀取仍在進行時破壞 wp_image_description_v1 資源。讀取完成時，撰寫器會使用釋放的wl_resource、寫入釋放的記憶體，並釋放衍生自該記憶體的指標。這可能會使 GNOME 工作階段當機，並可能允許在合成器處理程序內執行任意程式碼。（CVE-2026-108094）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Wayland 颜色管理 ICC 图像描述路径的 mutter 中发现一个释放后使用缺陷。如果本地攻击者能够运行恶意 Wayland 客户端，则可在异步 ICC 文件读取仍在进行时破坏 wp_image_description_v1 资源。读取完成后，排序器将使用释放的wl_resource，写入释放的内存并释放从该内存派生的指针。这可使 GNOME 会话崩溃，并可能允许在合成程序进程中执行任意代码。（CVE-2026-108094）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Wayland カラー管理 ICC image-description パスの mutter に、use-after-free の欠陥が見つかりました。悪意のあるWaylandクライアントを実行できるローカルの攻撃者が、非同期ICCファイルの読み取りの進行中にwp_image_description_v1リソースを破壊する可能性があります。読み取りが完了すると、コンポジターは解放されたwl_resourceを使用し、解放されたメモリに書き込み、そのメモリから派生したポインターを解放します。これにより、GNOMEセッションがクラッシュし、コンポジタープロセス内で任意のコードが実行される可能性があります。(CVE-2026-108094)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99130 advisory.

    Mutter is a compositing window manager that displays and manages desktop through OpenGL. It combines the     window-management logic inherited from the Metacity window manager with a display engine that uses the     Clutter toolkit.

    Security Fix(es):

    * mutter: mutter: client-triggered use-after-free in Wayland color-management ICC image description path     (CVE-2026-108094)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A     local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while     an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed     wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the     GNOME session and may allow arbitrary code execution within the compositor process. (CVE-2026-108094)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99141 advisory.

    Mutter is a compositing window manager that displays and manages desktop through OpenGL. It combines the     window-management logic inherited from the Metacity window manager with a display engine that uses the     Clutter toolkit.

    Security Fix(es):

    * mutter: mutter: client-triggered use-after-free in Wayland color-management ICC image description path     (CVE-2026-108094)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:99130 advisory.

    * mutter: mutter: client-triggered use-after-free in Wayland color-management ICC image description path     (CVE-2026-108094)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
369466	Linux Distros 未修補弱點：CVE-2026-108094	Nessus	Misc.	2026/10/21	2026/11/12	high
369466	Linux Distros 未修补的漏洞：CVE-2026-108094	Nessus	Misc.	2026/10/21	2026/11/12	high
369466	Linux Distros のパッチ未適用の脆弱性: CVE-2026-108094	Nessus	Misc.	2026/10/21	2026/11/12	high
379368	RHEL 10 : mutter (RHSA-2026:99130)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high
369466	Linux Distros Unpatched Vulnerability : CVE-2026-108094	Nessus	Misc.	2026/10/21	2026/11/12	high
379394	RHEL 10 : mutter (RHSA-2026:99141)	Nessus	Red Hat Local Security Checks	2026/11/12	2026/11/12	high
380208	RockyLinux 10 : mutter (RLSA-2026:99130)	Nessus	Rocky Linux Local Security Checks	2026/11/13	2026/11/13	high

検出

プラグインの検索

high

high

high

high

high

high

high