Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - cgroup/cpuset：處理 guarantee_active_cpus（） 中的 cpu 熱插拔爭用 使用提交 2125c0034c5d （cgroup/cpuset： 使 cpuset 熱插拔處理同步），cpuset 熱插拔作業會變成同步。該提交還刪除了處理 cpuset_hotplug_work 和 cpu 熱插拔通知程式之間爭用的程式碼，並假設爭用現在已經消失。稍後提交 7a0aabd9ce69 （cgroup/cpuset：
    始終使用 cpu_active_mask） 會更新 cpuset 程式碼，使其在某些地方始終使用 cpu_active_mask 而不是 cpu_online_mask，包括 guarantee_online_cpus（），在該提交中重新命名為 guarantee_active_cpus（）。在 CPU 離線作業的情況下，會先在 sched_cpu_deactivate（） 中更新 cpu_active_mask 以移除離線 CPU，然後再呼叫 cpuset_handle_hotplug（） 來更新受影響 cpuset 的effective_cpus。cpu_online_mask會在離線作業接近尾聲時更新，以移除離線 CPU。因此，爭用又回來了，而且頂層 cpuset 可能沒有任何作用中的 CPU，導致在爭用視窗期間出現 NULL 指標解除參照，因為在更新 cpu_active_mask 以移除要拆除的 CPU 之後，但在 guarantee_active_cpus cpuset_handle_hotplug（） 能夠正確更新頂層 cpuset 的effective_cpus之前呼叫 （） 時。透過重新新增 NULL cs 檢查來修正此問題，以避免此問題。（CVE-2026-99065）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - cgroup/cpuset：处理 guarantee_active_cpus（） 中的 cpu 热插拔争用，提交 2125c0034c5d（cgroup/cpuset：使 cpuset 热插拔处理同步），cpuset 热插拔操作将同步。该提交还删除了用于处理 cpuset_hotplug_work 和 cpu 热插拔通知程序之间的争用的代码，并假定现在已经消失了争用。稍后提交 7a0aabd9ce69 （cgroup/cpuset：
    始终使用 cpu_active_mask） 更新 cpuset 代码以始终在某些位置使用 cpu_active_mask 而非 cpu_online_mask，包括 guarantee_online_cpus（），它在该提交中重命名为 guarantee_active_cpus（）。在 CPU 离线操作的情况下，首先在 sched_cpu_deactivate（） 中更新 cpu_active_mask以删除离线 CPU，然后再调用 cpuset_handle_hotplug（） 更新受影响 cpuset 的effective_cpus。此后，离线操作接近尾声时会更新cpu_online_mask，以移除离线 CPU。因此，如果在更新了 cpu_active_mask 以删除要拆散的 CPU，但在 cpuset_handle_hotplug（） 能够正确更新最上层 cpuset 的effective_cpus之前调用 guarantee_active_cpus（），则争用卷土重来，并且顶层 cpuset 可能没有任何活动 CPU，从而导致空指针取消引用。通过添加回 NULL cs 检查来修复此问题，以避免此问题。（CVE-2026-99065）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - cgroup/cpuset:コミット 2125c0034c5d(cgroup/cpuset:cpuset ホットプラグ処理を同期させる)により、guarantee_active_cpus() における cpu ホットプラグ競合を処理します。cpuset ホットプラグ操作を同期させます。そのコミットは、競合がなくなったことを前提に、cpuset_hotplug_work と cpu ホットプラグ通知子の間の競合を処理するコードも削除します。後でコミット 7a0aabd9ce69(cgroup/cpuset:
    Always use cpu_active_mask) は、コミットで guarantee_active_cpus() に名前が変更される guarantee_online_cpus() を含む一部の場所で、cpu_online_mask ではなく cpu_active_mask を常に使用するように cpuset コードを更新します。CPU オフライン操作の場合、影響を受ける cpuset のeffective_cpusを更新するために cpuset_handle_hotplug() が呼び出される前に、最初に sched_cpu_deactivate() で cpu_active_mask が更新され、オフライン CPU が削除されます。その後、オフライン操作の終わり近くで cpu_online_mask が更新され、オフライン CPU が削除されます。その結果、cpu_active_maskが更新されて破棄するCPUを削除した後、cpuset_handle_hotplug()が上位のcpusetのeffective_cpusを適切に更新できるようになる前に、競合ウィンドウ中に競合ウィンドウ中に競合状態のguarantee_active_cpus()が呼び出されると、競合状態の中に競合状態のが再発し、最上位のcpusetにアクティブなCPUがない場合もあります。この問題を回避するために、NULL cs チェックを追加し直すことで、この問題を修正します。(CVE-2026-99065)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-9018-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Network file systems library;

    - Stream parser;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Android drivers;

    - Bluetooth drivers;

    - TPM device driver;

    - DPLL subsystem;

    - EDAC drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - IIO ADC drivers;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - Multiple devices driver;

    - MemoryStick subsystem;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Ethernet bonding driver;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - Power sequencing drivers;

    - Voltage and Current Regulator drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - Greybus lights staging drivers;

    - Trusted Execution Environment drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - Cadence USB3 driver;

    - USB Device Class drivers;

    - USB core drivers;

    - DesignWare USB2 driver;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Mass Storage drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - Amazon Nitro Enclaves driver;

    - Virtual machine generation ID driver;

    - BTRFS file system;

    - File systems infrastructure;

    - SMB network file system;

    - XFS file system;

    - BPF subsystem;

    - io_uring subsystem;

    - Netfilter;

    - Namespaces infrastructure;

    - Networking core;

    - Networking subsytem;

    - Virtio network driver;

    - Bluetooth subsystem;

    - IPv4 networking;

    - Network traffic control;

    - Audit subsystem;

    - Control group (cgroup);

    - Perf events;

    - Kernel fork() syscall;

    - Kernel futex primitives;

    - KProbes tracing;

    - Kexec HandOver (KHO);

    - Kernel module support;

    - Tracing infrastructure;

    - Workqueue subsystem;

    - Memory management;

    - Ethernet bridge;

    - Devlink API;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - Open vSwitch;

    - Packet sockets;

    - SCTP protocol;

    - SMC sockets;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - XFRM subsystem;

    - Drivers core;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - Creative Sound Blaster X-Fi driver;

    - Analog Devices audio codecs;

    - Maxim audio codecs;

    - Realtek audio codecs;

    - QCOM ASoC drivers;

    - Samsung ASoC drivers;

    - SoundWire (SDCA) ASoC drivers;

    - USB sound devices; (CVE-2026-68305, CVE-2026-72404, CVE-2026-72497, CVE-2026-74527, CVE-2026-74568,     CVE-2026-89568, CVE-2026-89764, CVE-2026-89907, CVE-2026-90144, CVE-2026-90155, CVE-2026-90162,     CVE-2026-90167, CVE-2026-90317, CVE-2026-93175, CVE-2026-98038, CVE-2026-98375, CVE-2026-98432,     CVE-2026-98655, CVE-2026-98656, CVE-2026-98657, CVE-2026-98658, CVE-2026-98659, CVE-2026-98660,     CVE-2026-98661, CVE-2026-98662, CVE-2026-98663, CVE-2026-98664, CVE-2026-98665, CVE-2026-98666,     CVE-2026-98667, CVE-2026-98668, CVE-2026-98669, CVE-2026-98670, CVE-2026-98671, CVE-2026-98672,     CVE-2026-98673, CVE-2026-98674, CVE-2026-98675, CVE-2026-98676, CVE-2026-98677, CVE-2026-98678,     CVE-2026-98679, CVE-2026-98680, CVE-2026-98681, CVE-2026-98682, CVE-2026-98683, CVE-2026-98684,     CVE-2026-98685, CVE-2026-98686, CVE-2026-98687, CVE-2026-98689, CVE-2026-98690, CVE-2026-98691,     CVE-2026-98692, CVE-2026-98693, CVE-2026-98694, CVE-2026-98695, CVE-2026-98696, CVE-2026-98697,     CVE-2026-98698, CVE-2026-98699, CVE-2026-98700, CVE-2026-98701, CVE-2026-98702, CVE-2026-98703,     CVE-2026-98704, CVE-2026-98705, CVE-2026-98706, CVE-2026-98707, CVE-2026-98708, CVE-2026-98709,     CVE-2026-98710, CVE-2026-98711, CVE-2026-98712, CVE-2026-98713, CVE-2026-98714, CVE-2026-98715,     CVE-2026-98716, CVE-2026-98717, CVE-2026-98718, CVE-2026-98719, CVE-2026-98720, CVE-2026-98721,     CVE-2026-98722, CVE-2026-98723, CVE-2026-98724, CVE-2026-98725, CVE-2026-98726, CVE-2026-98727,     CVE-2026-98728, CVE-2026-98729, CVE-2026-98730, CVE-2026-98731, CVE-2026-98732, CVE-2026-98733,     CVE-2026-98734, CVE-2026-98735, CVE-2026-98736, CVE-2026-98737, CVE-2026-98738, CVE-2026-98739,     CVE-2026-98740, CVE-2026-98741, CVE-2026-98742, CVE-2026-98743, CVE-2026-98744, CVE-2026-98745,     CVE-2026-98746, CVE-2026-98747, CVE-2026-98748, CVE-2026-98749, CVE-2026-98750, CVE-2026-98751,     CVE-2026-98752, CVE-2026-98753, CVE-2026-98754, CVE-2026-98755, CVE-2026-98756, CVE-2026-98757,     CVE-2026-98758, CVE-2026-98759, CVE-2026-98760, CVE-2026-98761, CVE-2026-98762, CVE-2026-98763,     CVE-2026-98764, CVE-2026-98765, CVE-2026-98766, CVE-2026-98767, CVE-2026-98768, CVE-2026-98769,     CVE-2026-98770, CVE-2026-98771, CVE-2026-98772, CVE-2026-98773, CVE-2026-98774, CVE-2026-98775,     CVE-2026-98776, CVE-2026-98777, CVE-2026-98778, CVE-2026-98779, CVE-2026-98780, CVE-2026-98781,     CVE-2026-98782, CVE-2026-98783, CVE-2026-98784, CVE-2026-98785, CVE-2026-98786, CVE-2026-98788,     CVE-2026-98789, CVE-2026-98790, CVE-2026-98791, CVE-2026-98792, CVE-2026-98793, CVE-2026-98794,     CVE-2026-98795, CVE-2026-98796, CVE-2026-98797, CVE-2026-98798, CVE-2026-98799, CVE-2026-98800,     CVE-2026-98801, CVE-2026-98802, CVE-2026-98803, CVE-2026-98804, CVE-2026-98805, CVE-2026-98806,     CVE-2026-98807, CVE-2026-98808, CVE-2026-98809, CVE-2026-98810, CVE-2026-98811, CVE-2026-98812,     CVE-2026-98813, CVE-2026-98814, CVE-2026-98816, CVE-2026-98817, CVE-2026-98818, CVE-2026-98819,     CVE-2026-98820, CVE-2026-98821, CVE-2026-98822, CVE-2026-98823, CVE-2026-98824, CVE-2026-98825,     CVE-2026-98826, CVE-2026-98827, CVE-2026-98828, CVE-2026-98829, CVE-2026-98830, CVE-2026-98831,     CVE-2026-98833, CVE-2026-98834, CVE-2026-98835, CVE-2026-98836, CVE-2026-98837, CVE-2026-98838,     CVE-2026-98839, CVE-2026-98840, CVE-2026-98841, CVE-2026-98842, CVE-2026-98843, CVE-2026-98844,     CVE-2026-98845, CVE-2026-98846, CVE-2026-98847, CVE-2026-98848, CVE-2026-98849, CVE-2026-98850,     CVE-2026-98851, CVE-2026-98852, CVE-2026-98853, CVE-2026-98854, CVE-2026-98855, CVE-2026-98856,     CVE-2026-98857, CVE-2026-98858, CVE-2026-98859, CVE-2026-98860, CVE-2026-98861, CVE-2026-98862,     CVE-2026-98863, CVE-2026-98931, CVE-2026-98932, CVE-2026-98933, CVE-2026-98934, CVE-2026-98935,     CVE-2026-98936, CVE-2026-98937, CVE-2026-98939, CVE-2026-98940, CVE-2026-98944, CVE-2026-98945,     CVE-2026-98946, CVE-2026-98947, CVE-2026-98948, CVE-2026-98949, CVE-2026-98950, CVE-2026-98951,     CVE-2026-98952, CVE-2026-98953, CVE-2026-98954, CVE-2026-98955, CVE-2026-98956, CVE-2026-98957,     CVE-2026-98958, CVE-2026-98959, CVE-2026-98960, CVE-2026-98961, CVE-2026-98962, CVE-2026-98963,     CVE-2026-98964, CVE-2026-98965, CVE-2026-98966, CVE-2026-98967, CVE-2026-98968, CVE-2026-98969,     CVE-2026-98970, CVE-2026-98971, CVE-2026-98972, CVE-2026-98973, CVE-2026-98974, CVE-2026-98975,     CVE-2026-98977, CVE-2026-98978, CVE-2026-98979, CVE-2026-98980, CVE-2026-98981, CVE-2026-98982,     CVE-2026-98983, CVE-2026-98984, CVE-2026-98985, CVE-2026-98986, CVE-2026-98987, CVE-2026-98988,     CVE-2026-98989, CVE-2026-98990, CVE-2026-98991, CVE-2026-98992, CVE-2026-98993, CVE-2026-98994,     CVE-2026-98995, CVE-2026-98996, CVE-2026-98997, CVE-2026-98999, CVE-2026-99000, CVE-2026-99001,     CVE-2026-99002, CVE-2026-99003, CVE-2026-99004, CVE-2026-99005, CVE-2026-99006, CVE-2026-99007,     CVE-2026-99008, CVE-2026-99009, CVE-2026-99010, CVE-2026-99011, CVE-2026-99012, CVE-2026-99013,     CVE-2026-99014, CVE-2026-99015, CVE-2026-99016, CVE-2026-99017, CVE-2026-99018, CVE-2026-99019,     CVE-2026-99020, CVE-2026-99021, CVE-2026-99022, CVE-2026-99023, CVE-2026-99024, CVE-2026-99025,     CVE-2026-99026, CVE-2026-99027, CVE-2026-99028, CVE-2026-99029, CVE-2026-99030, CVE-2026-99031,     CVE-2026-99032, CVE-2026-99033, CVE-2026-99034, CVE-2026-99035, CVE-2026-99036, CVE-2026-99037,     CVE-2026-99038, CVE-2026-99039, CVE-2026-99040, CVE-2026-99041, CVE-2026-99043, CVE-2026-99044,     CVE-2026-99045, CVE-2026-99046, CVE-2026-99047, CVE-2026-99048, CVE-2026-99049, CVE-2026-99050,     CVE-2026-99051, CVE-2026-99052, CVE-2026-99053, CVE-2026-99054, CVE-2026-99055, CVE-2026-99056,     CVE-2026-99057, CVE-2026-99058, CVE-2026-99059, CVE-2026-99060, CVE-2026-99061, CVE-2026-99062,     CVE-2026-99063, CVE-2026-99064, CVE-2026-99065, CVE-2026-99066, CVE-2026-99067, CVE-2026-99068,     CVE-2026-99069, CVE-2026-99070, CVE-2026-99071, CVE-2026-99072, CVE-2026-99073, CVE-2026-99074,     CVE-2026-99075, CVE-2026-99076, CVE-2026-99077, CVE-2026-99078, CVE-2026-99079, CVE-2026-99080,     CVE-2026-99081, CVE-2026-99088, CVE-2026-99089, CVE-2026-99090, CVE-2026-99091, CVE-2026-99092,     CVE-2026-99093, CVE-2026-99094, CVE-2026-99095, CVE-2026-99096, CVE-2026-99097, CVE-2026-99098,     CVE-2026-99099, CVE-2026-99999)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Handle cpu hotplug race     in guarantee_active_cpus() With commit 2125c0034c5d (cgroup/cpuset: Make cpuset hotplug processing     synchronous), the cpuset hotplug operation becomes synchronous. That commit also removes the code that     handles race between cpuset_hotplug_work and cpu hotplug notifier with the assumption that race is now     gone. Later commit 7a0aabd9ce69 (cgroup/cpuset: Always use cpu_active_mask) updates the cpuset code to     always use cpu_active_mask instead of cpu_online_mask in some places including guarantee_online_cpus()     which is renamed to guarantee_active_cpus() in that commit. In the case of CPU offline operation,     cpu_active_mask is updated first in sched_cpu_deactivate() to remove the offline CPU before     cpuset_handle_hotplug() is called to update the effective_cpus of the affected cpusets. The     cpu_online_mask is updated after that near the end of the offline operation to remove the offline CPU. As     a result, the race comes back and the top cpuset may not have any active CPU leading to NULL pointer     dereference during the race window when guarantee_active_cpus() is called after cpu_active_mask is updated     to remove the CPU to be torn down but before cpuset_handle_hotplug() is able to properly update the     effective_cpus of the top cpuset. Fix this by adding back the NULL cs check to avoid this problem.
    (CVE-2026-99065)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
372344	Linux Distros 未修補弱點：CVE-2026-99065	Nessus	Misc.	2026/10/27	2026/11/13	medium
372344	Linux Distros 未修补的漏洞：CVE-2026-99065	Nessus	Misc.	2026/10/27	2026/11/13	medium
372344	Linux Distros のパッチ未適用の脆弱性: CVE-2026-99065	Nessus	Misc.	2026/10/27	2026/11/13	medium
381339	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-9018-1)	Nessus	Ubuntu Local Security Checks	2026/11/14	2026/11/14	critical
372344	Linux Distros Unpatched Vulnerability : CVE-2026-99065	Nessus	Misc.	2026/10/27	2026/11/13	medium

検出

プラグインの検索

medium

medium

medium

critical

medium