According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    netfilter: ctnetlink: remove refcounting in expectation dumpers(CVE-2025-39764)

    nvme: nvme-fc: Ensure -ioerr_work is cancelled in nvme_fc_delete_ctrl()(CVE-2025-40261)

    ipv4: ip_gre: make ipgre_header() robust(CVE-2026-23011)

    bonding: limit BOND_MODE_8023AD to Ethernet devices(CVE-2026-23099)

    iommu: disable SVA when CONFIG_X86 is set(CVE-2025-71089)

    mm/hugetlb: fix hugetlb_pmd_shared()(CVE-2026-23100)

    uacce: ensure safe queue release with state management(CVE-2026-23063)

    scsi: target: Reset t_task_cdb pointer in error case(CVE-2025-68782)

    leds: led-class: Only Add LED to leds_list when it is fully ready(CVE-2026-23101)

    usb: typec: ucsi: Handle incorrect num_connectors capability(CVE-2025-71108)

    net/sched: sch_qfq: do not free existing class in qfq_change_class()(CVE-2026-22999)

    SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf(CVE-2025-71120)

    perf/x86/amd: Check event before enable to avoid GPF(CVE-2025-68798)

    libceph: make decode_pool() more resilient against corrupted osdmaps(CVE-2025-71116)

    NFSD: NFSv4 file creation neglects setting ACL(CVE-2025-68803)

    x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1(CVE-2026-23005)

    nbd: defer config put in recv_work(CVE-2025-68372)

    net: hns3: using the num_tqps in the vf driver to apply for resources(CVE-2025-71064)

    net: sock: fix hardened usercopy panic in sock_recv_errqueue(CVE-2026-22977)

    uacce: implement mremap in uacce_vm_ops to return -EPERM(CVE-2026-23056)

    irqchip/gic-v3-its: Avoid truncating memory addresses(CVE-2026-23085)

    KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer(CVE-2025-71104)

    net: openvswitch: fix middle attribute validation in push_nsh() action(CVE-2025-68785)

    libceph: make calc_target() set t-paused, not just clear it(CVE-2026-23047)

    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags(CVE-2025-68764)

    macvlan: fix error recovery in macvlan_common_newlink()(CVE-2026-23209)

    regmap: Fix race condition in hwspinlock irqsave routine(CVE-2026-23071)

    nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec(CVE-2026-22998)

    net: hns3: add VLAN id validation before using(CVE-2025-71112)

    sctp: Prevent TOCTOU out-of-bounds write(CVE-2025-40331)

    crypto: virtio - Add spinlock protection with virtqueue notification(CVE-2026-23229)

    uacce: fix isolate sysfs check condition(CVE-2026-23094)

    net/sched: Enforce that teql can only be used as root qdisc(CVE-2026-23074)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()(CVE-2026-23216)

    ipvlan: Make the addrs_lock be per port(CVE-2026-23103)

    RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly(CVE-2025-71096)

    net: hv_netvsc: reject RSS hash key programming without RX indirection table(CVE-2026-23054)

    nfsd: provide locking for v4_end_grace(CVE-2026-22980)

    net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag(CVE-2026-23105)

    ACPICA: Avoid walking the Namespace if start_node is NULL(CVE-2025-71118)

    nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()(CVE-2026-23179)

    tpm: Cap the number of PCR banks(CVE-2025-71077)

    sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT(CVE-2026-23125)

    migrate: correct lock ordering for hugetlb file folios(CVE-2026-23097)

    net: usb: pegasus: fix memory leak in update_eth_regs_async()(CVE-2026-23021)

    net/mlx5: fw_tracer, Validate format string parameters(CVE-2025-68816)

    scsi: qla2xxx: Delay module unload while fabric scan in progress(CVE-2025-71235)

    net: use dst_dev_rcu() in sk_setup_caps()(CVE-2025-40170)

    pNFS: Fix a deadlock when returning a delegation during open()(CVE-2026-23050)

    scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path'(CVE-2025-68818)

    ipvs: fix ipv4 null-ptr-deref in route error path(CVE-2025-68813)

    fsnotify: do not generate ACCESS/MODIFY events on child for special files(CVE-2025-68788)

    vsock/virtio: fix potential underflow in virtio_transport_get_credit()(CVE-2026-23069)

    ip6_gre: make ip6gre_header() robust(CVE-2025-71098)

    platform/x86: classmate-laptop: Add missing NULL pointer checks(CVE-2026-23237)

    net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset(CVE-2026-22976)

    blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init(CVE-2023-54271)

    KVM: arm64: Prevent access to vCPU events before init(CVE-2025-40102)

    tracing: Add recursion protection in kernel stack trace recording(CVE-2026-23138)

    scsi: qla2xxx: Fix bsg_done() causing double free(CVE-2025-71238)

    mm/secretmem: fix use-after-free race in fault handler(CVE-2025-40272)

    vsock/virtio: cap TX credit to local buffer size(CVE-2026-23086)

    iomap: adjust read range correctly for non-block-aligned positions(CVE-2025-68794)

    ipv6: use RCU in ip6_xmit()(CVE-2025-40135)

    libceph: make free_choose_arg_map() resilient to partial allocation(CVE-2026-22991)

    tracing: Do not register unsupported perf events(CVE-2025-71125)

    netfilter: nf_tables: avoid chain re-validation if possible(CVE-2025-71160)

    io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop(CVE-2026-23113)

    HID: uclogic: Correct devm device reference for hidinput input_dev name(CVE-2023-54207)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()(CVE-2026-23193)

    scsi: core: Wake up the error handler when final completions race against each other(CVE-2026-23110)

    vsock: fix lock inversion in vsock_assign_transport()(CVE-2025-40231)

    bonding: annotate data-races around slave-last_rx(CVE-2026-23212)

    be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list(CVE-2026-23084)

    inet: frags: flush pending skbs in fqdir_pre_exit()(CVE-2025-68768)

    ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()(CVE-2026-23003)

    io_uring: fix filename leak in __io_openat_prep()(CVE-2025-68814)

    RDMA/cm: Fix leaking the multicast GID table reference(CVE-2025-71084)

    net/sched: cls_u32: use skb_header_pointer_careful()(CVE-2026-23204)

    wifi: avoid kernel-infoleak from struct iw_point(CVE-2026-22978)

    scsi: qla2xxx: Validate sp before freeing associated memory(CVE-2025-71236)

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec(CVE-2026-23112)

    scsi: qla2xxx: Free sp in error path to fix system crash(CVE-2025-71232)

    ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()(CVE-2025-71085)

    macvlan: fix possible UAF in macvlan_forward_source()(CVE-2026-23001)

    drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP(CVE-2023-54263)

    media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()(CVE-2025-68819)

    crypto: seqiv - Do not use req-iv after crypto_aead_encrypt(CVE-2025-71131)

    blk-mq: fix tags leak when shrink nr_hw_queues(CVE-2023-54227)

    net: usb: rtl8150: fix memory leak on usb_submit_urb() failure(CVE-2025-71154)

    ipv6: use RCU in ip6_output()(CVE-2025-40158)

    libceph: replace overzealous BUG_ON in osdmap_apply_incremental()(CVE-2026-22990)

    net: fix segmentation of forwarding fraglist GRO(CVE-2026-23154)

    sched/deadline: only set free_cpus for online runqueues(CVE-2025-68780)

    crypto: authencesn - reject too-short AAD (assoclen8) to match ESP/ESN spec(CVE-2026-23060)

    l2tp: avoid one data-race in l2tp_tunnel_del_work()(CVE-2026-23120)

    ipv4: Fix reference count leak when using error routes with nexthop objects(CVE-2025-71097)

    uacce: fix cdev handling in the cleanup path(CVE-2026-23096)

    pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()(CVE-2026-23038)

    KVM: Don't clobber irqfd routing type when deassigning irqfd(CVE-2026-23198)

    netdevsim: fix a race issue related to the operation on bpf_bound_progs list(CVE-2026-23126)

    RDMA/umad: Reject negative data_len in ib_umad_write(CVE-2026-23243)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4777 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4777-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                 Salvatore Bonaccorso     September 08, 2026                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.187-1     CVE ID         : CVE-2023-53706 CVE-2023-54141 CVE-2023-54263 CVE-2024-38620                      CVE-2024-46754 CVE-2024-58094 CVE-2024-58095 CVE-2025-22104                      CVE-2025-38117 CVE-2025-38203 CVE-2025-38206 CVE-2025-38237                      CVE-2025-38616 CVE-2025-39833 CVE-2025-39901 CVE-2025-39925                      CVE-2025-40054 CVE-2025-40064 CVE-2025-40102 CVE-2025-40139                      CVE-2025-40168 CVE-2025-40206 CVE-2025-40307 CVE-2025-68794                      CVE-2026-23394 CVE-2026-31419 CVE-2026-43491 CVE-2026-45963                      CVE-2026-46111 CVE-2026-46158 CVE-2026-46170 CVE-2026-46266                      CVE-2026-53089 CVE-2026-53090 CVE-2026-53361 CVE-2026-64082                      CVE-2026-64139 CVE-2026-64192 CVE-2026-64270 CVE-2026-64272                      CVE-2026-64280 CVE-2026-64294 CVE-2026-64434 CVE-2026-64507                      CVE-2026-64508 CVE-2026-64542 CVE-2026-64543 CVE-2026-64561                      CVE-2026-64562 CVE-2026-64563 CVE-2026-64564 CVE-2026-64565                      CVE-2026-64567 CVE-2026-64569 CVE-2026-64571 CVE-2026-64572                      CVE-2026-64573 CVE-2026-64576 CVE-2026-64577 CVE-2026-64578                      CVE-2026-64579 CVE-2026-64580 CVE-2026-64581 CVE-2026-64582                      CVE-2026-64583 CVE-2026-64584 CVE-2026-64586 CVE-2026-64590                      CVE-2026-68082 CVE-2026-68093 CVE-2026-68096 CVE-2026-68099                      CVE-2026-68100 CVE-2026-68104 CVE-2026-68106 CVE-2026-68108                      CVE-2026-68111 CVE-2026-68115 CVE-2026-68117 CVE-2026-68121                      CVE-2026-68123 CVE-2026-68124 CVE-2026-68125 CVE-2026-68127                      CVE-2026-68129 CVE-2026-68130 CVE-2026-68131 CVE-2026-68132                      CVE-2026-68135 CVE-2026-68136 CVE-2026-68137 CVE-2026-68138                      CVE-2026-68140 CVE-2026-68141 CVE-2026-68142 CVE-2026-68143                      CVE-2026-68144 CVE-2026-68146 CVE-2026-68147 CVE-2026-68148                      CVE-2026-68151 CVE-2026-68153 CVE-2026-68154 CVE-2026-68155                      CVE-2026-68156 CVE-2026-68157 CVE-2026-68158 CVE-2026-68159                      CVE-2026-68160 CVE-2026-68162 CVE-2026-68164 CVE-2026-68165                      CVE-2026-68169 CVE-2026-68175 CVE-2026-68176 CVE-2026-68180                      CVE-2026-68181 CVE-2026-68182 CVE-2026-68183 CVE-2026-68184                      CVE-2026-68186 CVE-2026-68187 CVE-2026-68188 CVE-2026-68189                      CVE-2026-68190 CVE-2026-68192 CVE-2026-68194 CVE-2026-68195                      CVE-2026-68196 CVE-2026-68197 CVE-2026-68198 CVE-2026-68199                      CVE-2026-68202 CVE-2026-68204 CVE-2026-68206 CVE-2026-68207                      CVE-2026-68209 CVE-2026-68210 CVE-2026-68212 CVE-2026-68213                      CVE-2026-68214 CVE-2026-68215 CVE-2026-68216 CVE-2026-68217                      CVE-2026-68218 CVE-2026-68222 CVE-2026-68223 CVE-2026-68226                      CVE-2026-68227 CVE-2026-68229 CVE-2026-68231 CVE-2026-68234                      CVE-2026-68243 CVE-2026-68244 CVE-2026-68246 CVE-2026-68248                      CVE-2026-68249 CVE-2026-68250 CVE-2026-68251 CVE-2026-68253                      CVE-2026-68254 CVE-2026-68255 CVE-2026-68259 CVE-2026-68269                      CVE-2026-68277 CVE-2026-68278 CVE-2026-68279 CVE-2026-68280                      CVE-2026-68284 CVE-2026-68294 CVE-2026-68297 CVE-2026-68299                      CVE-2026-68300 CVE-2026-68301 CVE-2026-68302 CVE-2026-68304                      CVE-2026-68309 CVE-2026-68310 CVE-2026-68313 CVE-2026-68315                      CVE-2026-68320 CVE-2026-68322 CVE-2026-68324 CVE-2026-68325                      CVE-2026-68326 CVE-2026-68327 CVE-2026-68328 CVE-2026-68331                      CVE-2026-68333 CVE-2026-68335 CVE-2026-68336 CVE-2026-68338                      CVE-2026-68340 CVE-2026-68343 CVE-2026-68344 CVE-2026-68349                      CVE-2026-68350 CVE-2026-68351 CVE-2026-68352 CVE-2026-68353                      CVE-2026-68354 CVE-2026-68355 CVE-2026-68357 CVE-2026-68359                      CVE-2026-68360 CVE-2026-68361 CVE-2026-68362 CVE-2026-68363                      CVE-2026-68365 CVE-2026-68366 CVE-2026-68367 CVE-2026-68368                      CVE-2026-68369 CVE-2026-68370 CVE-2026-68371 CVE-2026-68373                      CVE-2026-68376 CVE-2026-68377 CVE-2026-68386 CVE-2026-68388                      CVE-2026-68395 CVE-2026-68397 CVE-2026-68398 CVE-2026-68402                      CVE-2026-68403 CVE-2026-68405 CVE-2026-68406 CVE-2026-68407                      CVE-2026-68410 CVE-2026-68411 CVE-2026-68413 CVE-2026-68414                      CVE-2026-68417 CVE-2026-68422 CVE-2026-68425 CVE-2026-68427                      CVE-2026-68428 CVE-2026-68430 CVE-2026-68431 CVE-2026-68432                      CVE-2026-68433 CVE-2026-68434 CVE-2026-68444 CVE-2026-68446                      CVE-2026-68450 CVE-2026-68451 CVE-2026-68452 CVE-2026-68476                      CVE-2026-68480 CVE-2026-72012 CVE-2026-72015 CVE-2026-72017                      CVE-2026-72023 CVE-2026-72030 CVE-2026-72035 CVE-2026-72040                      CVE-2026-72041 CVE-2026-72045 CVE-2026-72051 CVE-2026-72057                      CVE-2026-72062 CVE-2026-72063 CVE-2026-72065 CVE-2026-72069                      CVE-2026-72070 CVE-2026-72077 CVE-2026-72096 CVE-2026-72099                      CVE-2026-72110 CVE-2026-72113 CVE-2026-72114 CVE-2026-72115                      CVE-2026-72116 CVE-2026-72117 CVE-2026-72118 CVE-2026-72119                      CVE-2026-72121 CVE-2026-72124 CVE-2026-72125 CVE-2026-72142                      CVE-2026-72146 CVE-2026-72157 CVE-2026-72170 CVE-2026-72172                      CVE-2026-72191 CVE-2026-72216 CVE-2026-72236 CVE-2026-72237                      CVE-2026-72242 CVE-2026-72252 CVE-2026-72253 CVE-2026-72260                      CVE-2026-72262 CVE-2026-72299 CVE-2026-72305 CVE-2026-72308                      CVE-2026-72323 CVE-2026-72392 CVE-2026-74436 CVE-2026-74441                      CVE-2026-74443 CVE-2026-74444 CVE-2026-74446 CVE-2026-74450                      CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456                      CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460                      CVE-2026-74461 CVE-2026-74463 CVE-2026-74464 CVE-2026-74465                      CVE-2026-74467 CVE-2026-74468 CVE-2026-74469 CVE-2026-74470                      CVE-2026-74471 CVE-2026-74472 CVE-2026-74473 CVE-2026-74475                      CVE-2026-74476 CVE-2026-74478 CVE-2026-74479 CVE-2026-74480                      CVE-2026-74481 CVE-2026-74482 CVE-2026-74485 CVE-2026-74487                      CVE-2026-74488 CVE-2026-74490 CVE-2026-74492 CVE-2026-74493                      CVE-2026-74494 CVE-2026-74495 CVE-2026-74497 CVE-2026-74498                      CVE-2026-74499 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508                      CVE-2026-74509 CVE-2026-74510 CVE-2026-74512 CVE-2026-74514                      CVE-2026-74515 CVE-2026-74516 CVE-2026-74518 CVE-2026-74519                      CVE-2026-74522 CVE-2026-74523 CVE-2026-74525 CVE-2026-74540                      CVE-2026-74546 CVE-2026-74547 CVE-2026-74548 CVE-2026-74549                      CVE-2026-74550 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553                      CVE-2026-74555 CVE-2026-74556 CVE-2026-74557 CVE-2026-74563                      CVE-2026-74564 CVE-2026-74566 CVE-2026-74567 CVE-2026-74569                      CVE-2026-74575 CVE-2026-74577 CVE-2026-74579 CVE-2026-74580                      CVE-2026-74581 CVE-2026-74582 CVE-2026-74583 CVE-2026-74585                      CVE-2026-74586 CVE-2026-74587 CVE-2026-74588 CVE-2026-74589                      CVE-2026-74594 CVE-2026-74595 CVE-2026-74597 CVE-2026-74598                      CVE-2026-74601 CVE-2026-74603 CVE-2026-74604 CVE-2026-74607                      CVE-2026-74608 CVE-2026-74609 CVE-2026-74612 CVE-2026-74613                      CVE-2026-74614 CVE-2026-74615 CVE-2026-74616 CVE-2026-74620                      CVE-2026-74621 CVE-2026-74622 CVE-2026-74623 CVE-2026-74624                      CVE-2026-74625 CVE-2026-74626 CVE-2026-74628 CVE-2026-74630                      CVE-2026-74631 CVE-2026-74632 CVE-2026-74635 CVE-2026-74636                      CVE-2026-74637 CVE-2026-74641 CVE-2026-74647 CVE-2026-74648                      CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74654                      CVE-2026-74656 CVE-2026-74657 CVE-2026-74658 CVE-2026-74659                      CVE-2026-74660 CVE-2026-74662 CVE-2026-74663 CVE-2026-74664                      CVE-2026-74666 CVE-2026-74667 CVE-2026-74668 CVE-2026-74669                      CVE-2026-74671 CVE-2026-74672 CVE-2026-74673 CVE-2026-74675                      CVE-2026-74676 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680                      CVE-2026-74682 CVE-2026-74683 CVE-2026-74688 CVE-2026-74689                      CVE-2026-74691 CVE-2026-74692 CVE-2026-74693 CVE-2026-74694                      CVE-2026-74696 CVE-2026-74697 CVE-2026-74701 CVE-2026-74704                      CVE-2026-74705 CVE-2026-74714 CVE-2026-74717 CVE-2026-74719                      CVE-2026-74720 CVE-2026-74722 CVE-2026-74724 CVE-2026-74726                      CVE-2026-74730 CVE-2026-74737 CVE-2026-74739 CVE-2026-74743                      CVE-2026-74744 CVE-2026-74746 CVE-2026-74748 CVE-2026-80527                      CVE-2026-80528 CVE-2026-80529 CVE-2026-80534 CVE-2026-80536                      CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80547                      CVE-2026-80548 CVE-2026-80549 CVE-2026-80550 CVE-2026-80552                      CVE-2026-80553 CVE-2026-80555 CVE-2026-80557 CVE-2026-80558                      CVE-2026-80559 CVE-2026-80560 CVE-2026-80561 CVE-2026-80562                      CVE-2026-80565 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569                      CVE-2026-80570 CVE-2026-80572 CVE-2026-80573 CVE-2026-80574                      CVE-2026-80583 CVE-2026-80584 CVE-2026-80586 CVE-2026-80589                      CVE-2026-80590 CVE-2026-80678 CVE-2026-80679 CVE-2026-80680                      CVE-2026-80681 CVE-2026-80684 CVE-2026-80686 CVE-2026-80706                      CVE-2026-80707 CVE-2026-80708 CVE-2026-80709 CVE-2026-80714                      CVE-2026-80715 CVE-2026-80716 CVE-2026-80717 CVE-2026-80718                      CVE-2026-80722 CVE-2026-80725 CVE-2026-80726 CVE-2026-80730                      CVE-2026-80731 CVE-2026-80732 CVE-2026-80733 CVE-2026-80737                      CVE-2026-80742 CVE-2026-80743 CVE-2026-80744 CVE-2026-80752                      CVE-2026-80754 CVE-2026-80756 CVE-2026-80757 CVE-2026-80762                      CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80766                      CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80772                      CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80784                      CVE-2026-80788 CVE-2026-80789 CVE-2026-80790 CVE-2026-80791                      CVE-2026-80792 CVE-2026-80793 CVE-2026-80794 CVE-2026-80795                      CVE-2026-80796 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799                      CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803                      CVE-2026-80805 CVE-2026-80806 CVE-2026-80807 CVE-2026-80808                      CVE-2026-80809 CVE-2026-80812 CVE-2026-80814 CVE-2026-80819                      CVE-2026-80823 CVE-2026-80824 CVE-2026-80826 CVE-2026-80827                      CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831                      CVE-2026-80832 CVE-2026-80840 CVE-2026-80842 CVE-2026-80843                      CVE-2026-80844 CVE-2026-80846 CVE-2026-80848 CVE-2026-80852                      CVE-2026-80854 CVE-2026-80855 CVE-2026-80856 CVE-2026-80863                      CVE-2026-80888 CVE-2026-80890 CVE-2026-80891 CVE-2026-80892                      CVE-2026-80893 CVE-2026-80901 CVE-2026-80902 CVE-2026-80904                      CVE-2026-80906 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910                      CVE-2026-80913

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.187-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4111-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
    - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
    - CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
    - CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
    - CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
    - CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
    - CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
    - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
    - CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
    - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
    - CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
    - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
    - CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
    - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
    - CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
    - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
    - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
    - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
    - CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
    - CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
    - CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

    The following non security issues were fixed:

    - fbcon: Fix OOB access in font allocation (bsc#1252033)
    - mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
    - net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20172-1 advisory.

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
    - CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
    - CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
    - CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
    - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
    - CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
    - CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
    - CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
    - CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
    - CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
    - CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
    - CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval     (bsc#1250746).
    - CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
    - CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
    - CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
    - CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
    - CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
    - CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
    - CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
    - CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
    - CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
    - CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
    - CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
    - CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
    - CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()     (bsc#1252824).
    - CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
    - CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
    - CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
    - CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
    - CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
    - CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
    - CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
    - CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
    - CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
    - CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
    - CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
    - CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
    - CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()     (bsc#1252917).
    - CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST     (bsc#1252901).
    - CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
    - CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
    - CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
    - CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
    - CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
    - CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
    - CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
    - CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
    - CVE-2025-40157: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (bsc#1253423).
    - CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
    - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
    - CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
    - CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
    - CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
    - CVE-2025-40175: idpf: cleanup remaining SKBs in PTP flows (bsc#1253426).
    - CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
    - CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
    - CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
    - CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64()     paths (bsc#1253455).
    - CVE-2025-40203: listmount: don't call path_put() under namespace semaphore (bsc#1253457).

    The following non security issues were fixed:

    - ACPI: scan: Update honor list for RPMI System MSI (stable-fixes).
    - ACPICA: Update dsmethod.c to get rid of unused variable warning (stable-fixes).
    - Disable CONFIG_CPU5_WDT The cpu5wdt driver doesn't implement a       proper watchdog interface and has many code issues. It only handles       obscure and obsolete hardware. Stop building and supporting this driver       (jsc#PED-14062).
    - Fix drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923)
    - KVM: SVM: Delete IRTE link from previous vCPU before setting new IRTE (git-fixes).
    - KVM: SVM: Delete IRTE link from previous vCPU irrespective of new routing (git-fixes).
    - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (git-fixes).
    - KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
    - KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
    - KVM: x86/mmu: Return -EAGAIN if userspace deletes/moves memslot during prefault (git-fixes).
    - PCI/ERR: Update device error_state already after reset (stable-fixes).
    - PM: EM: Slightly reduce em_check_capacity_update() overhead (stable-fixes).
    - Revert net/mlx5e: Update and set Xon/Xoff upon MTU set (git-fixes).
    - Revert net/mlx5e: Update and set Xon/Xoff upon port speed set (git-fixes).
    - Update config files: enable zstd module decompression (jsc#PED-14115).
    - bpf/selftests: Fix test_tcpnotify_user (bsc#1253635).
    - btrfs: do not clear read-only when adding sprout device (bsc#1253238).
    - btrfs: do not update last_log_commit when logging inode due to a new name (git-fixes).
    - dm: fix queue start/stop imbalance under suspend/load/resume races (bsc#1253386)
    - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream (stable-fixes).
    - drm/amd/display: update color on atomic commit time (stable-fixes).
    - drm/amd/display: update dpp/disp clock from smu clock table (stable-fixes).
    - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock (stable-fixes).
    - hwmon: (lenovo-ec-sensors) Update P8 supprt (stable-fixes).
    - media: amphion: Delete v4l2_fh synchronously in .release() (stable-fixes).
    - mount: handle NULL values in mnt_ns_release() (bsc#1254308)
    - net/smc: Remove validation of reserved bits in CLC Decline (bsc#1252357).
    - net: phy: move realtek PHY driver to its own subdirectory (jsc#PED-14353).
    - net: phy: realtek: add defines for shadowed c45 standard registers (jsc#PED-14353).
    - net: phy: realtek: add helper RTL822X_VND2_C22_REG (jsc#PED-14353).
    - net: phy: realtek: change order of calls in C22 read_status() (jsc#PED-14353).
    - net: phy: realtek: clear 1000Base-T link partner advertisement (jsc#PED-14353).
    - net: phy: realtek: improve mmd register access for internal PHY's (jsc#PED-14353).
    - net: phy: realtek: read duplex and gbit master from PHYSR register (jsc#PED-14353).
    - net: phy: realtek: switch from paged to MMD ops in rtl822x functions (jsc#PED-14353).
    - net: phy: realtek: use string choices helpers (jsc#PED-14353).
    - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (bsc#1250746)
    - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (bsc#1250746)
    - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (bsc#1250746)
    - nvmet-auth: update sc_c in host response (git-fixes bsc#1249397).
    - nvmet-auth: update sc_c in target host hash calculation (git-fixes).
    - perf list: Add IBM z17 event descriptions (jsc#PED-13611).
    - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (git-fixes).
    - powercap: intel_rapl: Add support for Panther Lake platform (jsc#PED-13949).
    - pwm: pca9685: Use bulk write to atomicially update registers (stable-fixes).
    - r8169: add PHY c45 ops for MDIO_MMD_VENDOR2 registers (jsc#PED-14353).
    - r8169: add support for Intel Killer E5000 (jsc#PED-14353).
    - r8169: add support for RTL8125BP rev.b (jsc#PED-14353).
    - r8169: add support for RTL8125D rev.b (jsc#PED-14353).
    - r8169: adjust version numbering for RTL8126 (jsc#PED-14353).
    - r8169: align RTL8125 EEE config with vendor driver (jsc#PED-14353).
    - r8169: align RTL8125/RTL8126 PHY config with vendor driver (jsc#PED-14353).
    - r8169: align RTL8126 EEE config with vendor driver (jsc#PED-14353).
    - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers (jsc#PED-14353).
    - r8169: avoid duplicated messages if loading firmware fails and switch to warn level (jsc#PED-14353).
    - r8169: don't take RTNL lock in rtl_task() (jsc#PED-14353).
    - r8169: enable EEE at 2.5G per default on RTL8125B (jsc#PED-14353).
    - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support (jsc#PED-14353).
    - r8169: fix inconsistent indenting in rtl8169_get_eth_mac_stats (jsc#PED-14353).
    - r8169: implement additional ethtool stats ops (jsc#PED-14353).
    - r8169: improve __rtl8169_set_wol (jsc#PED-14353).
    - r8169: improve initialization of RSS registers on RTL8125/RTL8126 (jsc#PED-14353).
    - r8169: improve rtl_set_d3_pll_down (jsc#PED-14353).
    - r8169: increase max jumbo packet size on RTL8125/RTL8126 (jsc#PED-14353).
    - r8169: remove leftover locks after reverted change (jsc#PED-14353).
    - r8169: remove original workaround for RTL8125 broken rx issue (jsc#PED-14353).
    - r8169: remove rtl_dash_loop_wait_high/low (jsc#PED-14353).
    - r8169: remove support for chip version 11 (jsc#PED-14353).
    - r8169: remove unused flag RTL_FLAG_TASK_RESET_NO_QUEUE_WAKE (jsc#PED-14353).
    - r8169: replace custom flag with disable_work() et al (jsc#PED-14353).
    - r8169: switch away from deprecated pcim_iomap_table (jsc#PED-14353).
    - r8169: use helper r8169_mod_reg8_cond to simplify rtl_jumbo_config (jsc#PED-14353).
    - ring-buffer: Update pages_touched to reflect persistent buffer content (git-fixes).
    - s390/mm: Fix __ptep_rdp() inline assembly (bsc#1253643).
    - sched/fair: Get rid of sched_domains_curr_level hack for tl->cpumask() (bsc#1246843).
    - sched/fair: Have SD_SERIALIZE affect newidle balancing (bsc#1248792).
    - sched/fair: Proportional newidle balance (bsc#1248792).
    - sched/fair: Proportional newidle balance -KABI (bsc#1248792).
    - sched/fair: Revert max_newidle_lb_cost bump (bsc#1248792).
    - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (bsc#1248792).
    - sched/fair: Small cleanup to sched_balance_newidle() (bsc#1248792).
    - sched/fair: Small cleanup to update_newidle_cost() (bsc#1248792).
    - scsi: lpfc: Add capability to register Platform Name ID to fabric (bsc#1254119).
    - scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (bsc#1254119).
    - scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (bsc#1254119).
    - scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (bsc#1254119).
    - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (bsc#1254119).
    - scsi: lpfc: Modify kref handling for Fabric Controller ndlps (bsc#1254119).
    - scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb() (bsc#1254119).
    - scsi: lpfc: Revise discovery related function headers and comments (bsc#1254119).
    - scsi: lpfc: Update lpfc version to 14.4.0.12 (bsc#1254119).
    - scsi: lpfc: Update various NPIV diagnostic log messaging (bsc#1254119).
    - selftests/run_kselftest.sh: Add `--skip` argument option (bsc#1254221).
    - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup (bsc#1246843).
    - soc/tegra: fuse: speedo-tegra210: Update speedo IDs (git-fixes).
    - spi: tegra210-quad: Check hardware status on timeout (bsc#1253155)
    - spi: tegra210-quad: Fix timeout handling (bsc#1253155)
    - spi: tegra210-quad: Refactor error handling into helper functions (bsc#1253155)
    - spi: tegra210-quad: Update dummy sequence configuration (git-fixes)
    - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork (bsc#1250705).
    - wifi: ath11k: Add quirk entries for Thinkpad T14s Gen3 AMD (bsc#1254181).
    - wifi: mt76: do not add wcid entries to sta poll list during MCU reset (bsc#1254315).
    - wifi: mt76: introduce mt792x_config_mac_addr_list routine (bsc#1254315).
    - wifi: mt76: mt7925: Fix logical vs bitwise typo (bsc#1254315).
    - wifi: mt76: mt7925: Remove unnecessary if-check (bsc#1254315).
    - wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail (bsc#1254315).
    - wifi: mt76: mt7925: add EHT control support based on the CLC data (bsc#1254315).
    - wifi: mt76: mt7925: add handler to hif suspend/resume event (bsc#1254315).
    - wifi: mt76: mt7925: add pci restore for hibernate (bsc#1254315).
    - wifi: mt76: mt7925: config the dwell time by firmware (bsc#1254315).
    - wifi: mt76: mt7925: extend MCU support for testmode (bsc#1254315).
    - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (bsc#1254315).
    - wifi: mt76: mt7925: fix missing hdr_trans_tlv command for broadcast wtbl (bsc#1254315).
    - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (bsc#1254315).
    - wifi: mt76: mt7925: refine the txpower initialization flow (bsc#1254315).
    - wifi: mt76: mt7925: replace zero-length array with flexible-array member (bsc#1254315).
    - wifi: mt76: mt7925: update the channel usage when the regd domain changed (bsc#1254315).
    - wifi: mt76: mt7925e: fix too long of wifi resume time (bsc#1254315).
    - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled (bsc#1246843).
    - x86/smpboot: moves x86_topology to static initialize and truncate (bsc#1246843).
    - x86/smpboot: remove redundant CONFIG_SCHED_SMT (bsc#1246843).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8029-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - Nios II architecture;

    - PA-RISC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - Sun Sparc architecture;

    - x86 architecture;

    - Xtensa architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - Network block device driver;

    - Bluetooth drivers;

    - Bus devices;

    - Hardware random number generator core;

    - Character device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - Device frequency scaling framework;

    - ARM SCMI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - IOMMU subsystem;

    - ISDN/mISDN subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - PCI Endpoint Test driver;

    - VMware Balloon Driver;

    - MOST (Media Oriented Systems Transport) drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - PCI subsystem;

    - Performance monitor drivers;

    - Pin controllers subsystem;

    - Mellanox platform drivers;

    - x86 platform drivers;

    - ARM PM domains;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - PWM drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SPI subsystem;

    - Trusted Execution Environment drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - Userspace I/O drivers;

    - Cadence USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - BPF subsystem;

    - Mellanox drivers;

    - Memory management;

    - Virtio network driver;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - io_uring subsystem;

    - Kernel crash support code;

    - Perf events;

    - Kernel futex primitives;

    - PID allocator;

    - Scheduler infrastructure;

    - Syscalls implementation;

    - Timer subsystem;

    - Tracing infrastructure;

    - 9P file system network protocol;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - ALSA framework;

    - HD-audio driver;

    - AMD SoC Alsa drivers;

    - WCD audio codecs;

    - Intel ASoC drivers;

    - USB sound devices;

    - KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029,     CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035,     CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042,     CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048,     CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054,     CVE-2025-40055, CVE-2025-40056, CVE-2025-40057, CVE-2025-40058, CVE-2025-40059, CVE-2025-40060,     CVE-2025-40061, CVE-2025-40062, CVE-2025-40063, CVE-2025-40064, CVE-2025-40065, CVE-2025-40066,     CVE-2025-40067, CVE-2025-40068, CVE-2025-40069, CVE-2025-40070, CVE-2025-40071, CVE-2025-40072,     CVE-2025-40073, CVE-2025-40074, CVE-2025-40075, CVE-2025-40076, CVE-2025-40077, CVE-2025-40078,     CVE-2025-40079, CVE-2025-40080, CVE-2025-40081, CVE-2025-40082, CVE-2025-40084, CVE-2025-40085,     CVE-2025-40086, CVE-2025-40087, CVE-2025-40088, CVE-2025-40089, CVE-2025-40091, CVE-2025-40092,     CVE-2025-40093, CVE-2025-40094, CVE-2025-40095, CVE-2025-40096, CVE-2025-40097, CVE-2025-40098,     CVE-2025-40099, CVE-2025-40100, CVE-2025-40101, CVE-2025-40102, CVE-2025-40103, CVE-2025-40104,     CVE-2025-40105, CVE-2025-40106, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40113,     CVE-2025-40115, CVE-2025-40116, CVE-2025-40117, CVE-2025-40118, CVE-2025-40119, CVE-2025-40120,     CVE-2025-40121, CVE-2025-40122, CVE-2025-40123, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126,     CVE-2025-40127, CVE-2025-40129, CVE-2025-40130, CVE-2025-40131, CVE-2025-40132, CVE-2025-40133,     CVE-2025-40134, CVE-2025-40135, CVE-2025-40136, CVE-2025-40137, CVE-2025-40138, CVE-2025-40139,     CVE-2025-40140, CVE-2025-40141, CVE-2025-40142, CVE-2025-40143, CVE-2025-40145, CVE-2025-40146,     CVE-2025-40147, CVE-2025-40148, CVE-2025-40149, CVE-2025-40150, CVE-2025-40152, CVE-2025-40153,     CVE-2025-40154, CVE-2025-40155, CVE-2025-40156, CVE-2025-40158, CVE-2025-40159, CVE-2025-40160,     CVE-2025-40161, CVE-2025-40162, CVE-2025-40163, CVE-2025-40164, CVE-2025-40165, CVE-2025-40166,     CVE-2025-40167, CVE-2025-40168, CVE-2025-40169, CVE-2025-40170, CVE-2025-40171, CVE-2025-40172,     CVE-2025-40173, CVE-2025-40174, CVE-2025-40175, CVE-2025-40176, CVE-2025-40177, CVE-2025-40178,     CVE-2025-40179, CVE-2025-40180, CVE-2025-40181, CVE-2025-40182, CVE-2025-40183, CVE-2025-40184,     CVE-2025-40185, CVE-2025-40186, CVE-2025-40187, CVE-2025-40188, CVE-2025-40189, CVE-2025-40191,     CVE-2025-40192, CVE-2025-40193, CVE-2025-40194, CVE-2025-40195, CVE-2025-40196, CVE-2025-40198,     CVE-2025-40199, CVE-2025-40200, CVE-2025-40201, CVE-2025-40203, CVE-2025-40204, CVE-2025-40205,     CVE-2025-40206, CVE-2025-40207, CVE-2025-40208, CVE-2025-40209, CVE-2025-40210, CVE-2025-40211,     CVE-2025-40212, CVE-2025-40213, CVE-2025-40217, CVE-2025-40218, CVE-2025-40219, CVE-2025-40220,     CVE-2025-40221, CVE-2025-40222, CVE-2025-40223, CVE-2025-40224, CVE-2025-40225, CVE-2025-40226,     CVE-2025-40227, CVE-2025-40228, CVE-2025-40229, CVE-2025-40230, CVE-2025-40231, CVE-2025-40233,     CVE-2025-40234, CVE-2025-40235, CVE-2025-40236, CVE-2025-40237, CVE-2025-40238, CVE-2025-40239,     CVE-2025-40240, CVE-2025-40241, CVE-2025-40242, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245,     CVE-2025-40256, CVE-2025-40267, CVE-2025-40268, CVE-2025-40269, CVE-2025-40270, CVE-2025-40271,     CVE-2025-40272, CVE-2025-40273, CVE-2025-40274, CVE-2025-40275, CVE-2025-40276, CVE-2025-40277,     CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283,     CVE-2025-40284, CVE-2025-40285, CVE-2025-40286, CVE-2025-40287, CVE-2025-40288, CVE-2025-40289,     CVE-2025-40291, CVE-2025-40292, CVE-2025-40293, CVE-2025-40294, CVE-2025-40295, CVE-2025-40296,     CVE-2025-40297, CVE-2025-40298, CVE-2025-40299, CVE-2025-40301, CVE-2025-40302, CVE-2025-40303,     CVE-2025-40304, CVE-2025-40305, CVE-2025-40306, CVE-2025-40307, CVE-2025-40308, CVE-2025-40309,     CVE-2025-40310, CVE-2025-40311, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315,     CVE-2025-40316, CVE-2025-40317, CVE-2025-40318, CVE-2025-40319, CVE-2025-40320, CVE-2025-40321,     CVE-2025-40322, CVE-2025-40323, CVE-2025-40324, CVE-2025-40326, CVE-2025-40327, CVE-2025-40328,     CVE-2025-40329, CVE-2025-40330, CVE-2025-40331, CVE-2025-40332, CVE-2025-40333, CVE-2025-40334,     CVE-2025-40335, CVE-2025-40336, CVE-2025-40337, CVE-2025-40338, CVE-2025-40339, CVE-2025-40340,     CVE-2025-40341, CVE-2025-40342, CVE-2025-40343, CVE-2025-40344, CVE-2025-40346, CVE-2025-40347,     CVE-2025-40349, CVE-2025-40350, CVE-2025-40351, CVE-2025-40352, CVE-2025-40353, CVE-2025-40354,     CVE-2025-40355, CVE-2025-40356, CVE-2025-40357, CVE-2025-40358, CVE-2025-40359, CVE-2025-40360,     CVE-2025-40362, CVE-2025-40363, CVE-2025-68167, CVE-2025-68168, CVE-2025-68169, CVE-2025-68170,     CVE-2025-68171, CVE-2025-68172, CVE-2025-68173, CVE-2025-68174, CVE-2025-68175, CVE-2025-68176,     CVE-2025-68177, CVE-2025-68178, CVE-2025-68179, CVE-2025-68180, CVE-2025-68181, CVE-2025-68182,     CVE-2025-68183, CVE-2025-68184, CVE-2025-68185, CVE-2025-68186, CVE-2025-68187, CVE-2025-68188,     CVE-2025-68189, CVE-2025-68190, CVE-2025-68191, CVE-2025-68192, CVE-2025-68193, CVE-2025-68194,     CVE-2025-68196, CVE-2025-68197, CVE-2025-68198, CVE-2025-68199, CVE-2025-68200, CVE-2025-68201,     CVE-2025-68202, CVE-2025-68204, CVE-2025-68205, CVE-2025-68206, CVE-2025-68207, CVE-2025-68208,     CVE-2025-68209, CVE-2025-68210, CVE-2025-68211, CVE-2025-68239, CVE-2025-68240, CVE-2025-68241,     CVE-2025-68242, CVE-2025-68243, CVE-2025-68244, CVE-2025-68245, CVE-2025-68246, CVE-2025-68247,     CVE-2025-68248, CVE-2025-68249, CVE-2025-68250, CVE-2025-68251, CVE-2025-68253, CVE-2025-68309,     CVE-2025-68310, CVE-2025-68311, CVE-2025-68312, CVE-2025-68313, CVE-2025-68314, CVE-2025-68315,     CVE-2025-68316, CVE-2025-68317, CVE-2025-68318, CVE-2025-68319, CVE-2025-68320, CVE-2025-68321,     CVE-2025-68322, CVE-2025-68734)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007468 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Prevent access to vCPU events before init

    Another day, another syzkaller bug. KVM erroneously allows userspace to     pend vCPU events for a vCPU that hasn't been initialized yet, leading to     KVM interpreting a bunch of uninitialized garbage for routing /     injecting the exception.

    In one case the injection code and the hyp disagree on whether the vCPU     has a 32bit EL1 and put the vCPU into an illegal mode for AArch64,     tripping the BUG() in exception_target_el() during the next injection:

      kernel BUG at arch/arm64/kvm/inject_fault.c:40!       Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP       CPU: 3 UID: 0 PID: 318 Comm: repro Not tainted 6.17.0-rc4-00104-g10fd0285305d #6 PREEMPT       Hardware name: linux,dummy-virt (DT)       pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)       pc : exception_target_el+0x88/0x8c       lr : pend_serror_exception+0x18/0x13c       sp : ffff800082f03a10       x29: ffff800082f03a10 x28: ffff0000cb132280 x27: 0000000000000000       x26: 0000000000000000 x25: ffff0000c2a99c20 x24: 0000000000000000       x23: 0000000000008000 x22: 0000000000000002 x21: 0000000000000004       x20: 0000000000008000 x19: ffff0000c2a99c20 x18: 0000000000000000       x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200000c0       x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000       x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000       x8 : ffff800082f03af8 x7 : 0000000000000000 x6 : 0000000000000000       x5 : ffff800080f621f0 x4 : 0000000000000000 x3 : 0000000000000000       x2 : 000000000040009b x1 : 0000000000000003 x0 : ffff0000c2a99c20       Call trace:
       exception_target_el+0x88/0x8c (P)        kvm_inject_serror_esr+0x40/0x3b4
       __kvm_arm_vcpu_set_events+0xf0/0x100        kvm_arch_vcpu_ioctl+0x180/0x9d4        kvm_vcpu_ioctl+0x60c/0x9f4
       __arm64_sys_ioctl+0xac/0x104        invoke_syscall+0x48/0x110        el0_svc_common.constprop.0+0x40/0xe0        do_el0_svc+0x1c/0x28        el0_svc+0x34/0xf0        el0t_64_sync_handler+0xa0/0xe4        el0t_64_sync+0x198/0x19c       Code: f946bc01 b4fffe61 9101e020 17fffff2 (d4210000)

    Reject the ioctls outright as no sane VMM would call these before     KVM_ARM_VCPU_INIT anyway. Even if it did the exception would've been     thrown away by the eventual reset of the vCPU's state.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D     cache, potentially resulting in the leakage of sensitive information across privileged     boundaries.(CVE-2024-36357)

    bpf: Fix oob access in cgroup local storage(CVE-2025-38502)

    vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects(CVE-2025-39850)

    tracing: Fix reading strings from synthetic events(CVE-2022-50255)

    x86/mce: Work around an erratum on fast string copy instructions(CVE-2022-49124)

    serial: 8250: fix panic due to PSLVERR(CVE-2025-39724)

    fbcon: fix integer overflow in fbcon_do_set_font(CVE-2025-39967)

    i40e: add max boundary check for VF filters(CVE-2025-39968)

    scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()(CVE-2023-53530)

    scsi: qla2xxx: Fix premature hw access after PCI error(CVE-2022-49157)

    vxlan: Fix NPD when refreshing an FDB entry with a nexthop object(CVE-2025-39851)

    bpf, cpumap: Make sure kthread is running before map update returns(CVE-2023-53577)

    scsi: qla4xxx: Add length check when parsing nlattrs(CVE-2023-53456)

    bnxt: avoid overflow in bnxt_get_nvram_directory()(CVE-2023-53661)

    scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()(CVE-2023-53521)

    pNFS: Fix uninited ptr deref in block/scsi layout(CVE-2025-38691)

    udf: Fix uninitialized array access for some pathnames(CVE-2023-53165)

    scsi: qla2xxx: Pointer may be dereferenced(CVE-2023-53150)

    firewire: net: fix use after free in fwnet_finish_incoming_packet()(CVE-2023-53432)

    i40e: fix MMIO write access to an invalid page in i40e_clear_hw(CVE-2025-38200)

    RDMA/mlx5: Initialize obj_event-obj_sub_list before xa_insert(CVE-2025-38387)

    usb: net: sierra: check for no status endpoint(CVE-2025-38474)

    hv_netvsc: Fix panic during namespace deletion with VF(CVE-2025-38683)

    ext4: improve error handling from ext4_dirhash()(CVE-2023-53473)

    benet: fix BUG when creating VFs(CVE-2025-38569)

    mm/slub: avoid accessing metadata when pointer is invalid in object_err()(CVE-2025-39902)

    xfrm: Duplicate SPI Handling(CVE-2025-39797)

    i40e: fix validation of VF state in get resources(CVE-2025-39969)

    i40e: fix input validation logic for action_meta(CVE-2025-39970)

    cnic: Fix use-after-free bugs in cnic_delete_task(CVE-2025-39945)

    net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb(CVE-2023-53548)

    bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT(CVE-2025-38439)

    blk-mq: avoid double -queue_rq() because of early timeout(CVE-2022-50554)

    NFSD: Define a proc_layoutcommit for the FlexFiles layout type(CVE-2025-40087)

    tracing: dynevent: Add a missing lockdown check on dynevent(CVE-2025-40021)

    ppp: fix memory leak in pad_compress_skb(CVE-2025-39847)

    i40e: Fix potential invalid access when MAC list is empty(CVE-2025-39853)

    IB/hfi1: Fix possible panic during hotplug remove(CVE-2023-53488)

    vfs: Don't leak disconnected dentries on umount(CVE-2025-40105)

    In kernel/trace/trace_kprobe.c at line 1308, the kprobe_perf_func function attempts to access the call-     perf_events pointer, but due to the race condition, this pointer may not have been properly     initialized.(CVE-2025-40042)

    perf: arm_spe: Prevent overflow in PERF_IDX2OFF()(CVE-2025-40081)

    crypto: essiv - Check ssize for decryption and in-place encryption(CVE-2025-40019)

    loop: Avoid updating block size under exclusive owner(CVE-2025-38709)

    usb: xhci: Apply the link chain quirk on NEC isoc endpoints(CVE-2025-22022)

    nfsd: put dl_stid if fail to queue dl_recall(CVE-2025-22025)

    PCI/ASPM: Fix link state exit during switch upstream function removal(CVE-2024-58093)

    KVM: arm64: Prevent access to vCPU events before init(CVE-2025-40102)

    HID: ignore non-functional sensor in HP 5MP Camera(CVE-2025-21992)

    partitions: mac: fix handling of bogus partition table(CVE-2025-21772)

    fs: udf: fix OOB read in lengthAllocDescs handling(CVE-2025-40044)

    acpi: nfit: fix narrowing conversion in acpi_nfit_ctl(CVE-2025-22044)

    crypto: rng - Ensure set_ent is always present(CVE-2025-40109)

    scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()(CVE-2023-53696)

    drm/hisilicon/hibmc: fix the hibmc loaded failed bug(CVE-2025-39772)

    uio_hv_generic: Let userspace take care of interrupt mask(CVE-2025-40048)

    KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O(CVE-2025-40026)

    ext4: detect invalid INLINE_DATA + EXTENTS flag combination(CVE-2025-40167)

    scsi: ses: Fix possible desc_ptr out-of-bounds accesses(CVE-2023-53675)

    fs: quota: create dedicated workqueue for quota_release_work(CVE-2025-40196)

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg(CVE-2025-39964)

    mtd: core: fix possible resource leak in init_mtd()(CVE-2022-50304)

    RDMA/mlx5: Return the firmware result upon destroying QP/RQ(CVE-2023-53286)

    bnxt_en: Fix memory corruption when FW resources change during ifdown(CVE-2025-39810)

    RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()(CVE-2023-53335)

    fs: dlm: fix invalid derefence of sb_lvbptr(CVE-2022-50516)

    scsi: mpt3sas: Fix a memory leak(CVE-2023-53512)

    ext4: fix off-by-one errors in fast-commit block filling(CVE-2022-50428)

    KVM: x86: Reset IRTE to host control if *new* route isn't postable(CVE-2025-37885)

    PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type(CVE-2025-23161)

    scsi: st: Fix array overflow in st_setup()(CVE-2025-37857)

    isofs: Prevent the use of too small fid(CVE-2025-37780)

    md/raid1,raid10: don't ignore IO flags(CVE-2025-22125)

    virtiofs: add filesystem context source name check(CVE-2025-37773)

    vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint(CVE-2025-22083)

    crypto: af_alg - Set merge to zero early in af_alg_sendmsg(CVE-2025-39931)

    modpost: fix off by one in is_executable_section()(CVE-2023-53397)

    scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()(CVE-2025-40115)

    net: bridge: fix soft lockup in br_multicast_query_expired()(CVE-2025-39773)

    arm64: csum: Fix OoB access in IP checksum code for negative lengths(CVE-2023-53726)

    x86/MCE: Always save CS register on AMD Zen IF Poison errors(CVE-2023-53438)

    PCI: Fix reference leak in pci_register_host_bridge()(CVE-2025-37836)

    cacheinfo: Fix shared_cpu_map to handle shared caches at different levels(CVE-2023-53254)

    NFS: Fix the setting of capabilities when automounting a new filesystem(CVE-2025-39798)

    Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or     5th generation Xeon(R) processors may allow an authorized user to potentially enable escalation of     privilege local access(CVE-2024-21823)

    mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory(CVE-2025-39883)

    virtio_net: Fix error unwinding of XDP initialization(CVE-2023-53499)

    RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device(CVE-2023-53393)

    gfs2: No more self recovery(CVE-2025-38659)

    scsi: target: Fix WRITE_SAME No Data Buffer crash(CVE-2022-21546)

    cifs: Fix connections leak when tlink setup failed(CVE-2022-49822)

    cifs: avoid NULL pointer dereference in dbg call(CVE-2025-37844)

    smb3: fix for slab out of bounds on mount to ksmbd(CVE-2025-38728)

    ceph: fix race condition validating r_parent before applying state(CVE-2025-39927)

    cifs: fix small mempool leak in SMB2_negotiate()(CVE-2022-49938)

    NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()(CVE-2025-39730)

    smb: client: fix use-after-free in cifs_oplock_break(CVE-2025-38527)

    scsi: qla2xxx: Fix potential NULL pointer dereference(CVE-2023-53451)

    objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()(CVE-2025-37937)

    scsi: libiscsi: Initialize iscsi_conn-dd_data only if memory is allocated(CVE-2025-38700)

    block: fix resource leak in blk_register_queue() error path(CVE-2025-37980)

    scsi: target: Fix multiple LUN_RESET handling(CVE-2023-53586)

    md/raid1: Fix stack memory use after return in raid1_reshape(CVE-2025-38445)

    blk-mq: fix NULL dereference on q-elevator in blk_mq_elv_switch_none(CVE-2023-53292)

    scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses(CVE-2023-7324)

    nbd: restrict sockets to TCP and UDP(CVE-2025-40080)

    scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()(CVE-2023-53676)

    mm: hugetlb: avoid soft lockup when mprotect to large memory area(CVE-2025-40153)

    fbdev: fix potential buffer overflow in do_register_framebuffer()(CVE-2025-38702)

    net: ena: fix shift-out-of-bounds in exponential backoff(CVE-2023-53272)

    software node: Correct a OOB check in software_node_get_reference_args()(CVE-2025-38342)

    virtio: break and reset virtio devices on device_shutdown()(CVE-2025-38064)

    net/sched: sch_qfq: Fix race condition on qfq_aggregate(CVE-2025-38477)

    netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX(CVE-2025-38201)

    qed: allow sleep in qed_mcp_trace_dump()(CVE-2023-53509)

    vsock: Fix transport_* TOCTOU(CVE-2025-38461)

    ice: Fix a null pointer dereference in ice_copy_and_init_pkg()(CVE-2025-38664)

    tcp_metrics: use dst_dev_net_rcu()(CVE-2025-40075)

    netfilter: nf_tables: reject duplicate device on updates(CVE-2025-38678)

    ipvs: Defer ip_vs_ftp unregister during netns cleanup(CVE-2025-40018)

    net/packet: fix a race in packet_set_ring() and packet_notifier()(CVE-2025-38617)

    xfrm: Zero padding when dumping algos and encap(CVE-2023-53684)

    ipv4: start using dst_dev_rcu()(CVE-2025-40074)

    IB/mad: Don't call to function that might sleep while in atomic context(CVE-2022-50472)

    iavf: Fix reset error handling(CVE-2022-50053)

    RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug(CVE-2025-38024)

    RDMA/bnxt_re: wraparound mbox producer index(CVE-2023-53201)

    net/mlx5e: Check for NOT_READY flag state after locking(CVE-2023-53581)

    i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path(CVE-2025-39911)

    RDMA/rxe: Fix incomplete state save in rxe_requester(CVE-2023-53539)

    net_sched: sch_sfq: reject invalid perturb period(CVE-2025-38193)

    netfilter: conntrack: fix wrong ct-timeout value(CVE-2023-53635)

    net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree(CVE-2025-38468)

    vsock: Fix transport_{g2h,h2g} TOCTOU(CVE-2025-38462)

    media: tuner: xc5000: Fix use-after-free in xc5000_release(CVE-2025-39994)

    mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race(CVE-2025-38085)

    media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()(CVE-2025-38694)

    cifs: prevent NULL pointer dereference in UTF16 conversion(CVE-2025-39838)

    sctp: linearize cloned gso packets in sctp_rcv(CVE-2025-38718)

    mm/vmscan: don't try to reclaim hwpoison folio(CVE-2025-37834)

    tun: Fix memory leak for detached NAPI queue.(CVE-2023-53685)

    iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()(CVE-2023-53476)

    smb: client: fix race with concurrent opens in rename(2)(CVE-2025-39825)

    Squashfs: check return result of sb_min_blocksize(CVE-2025-38415)

    HID: multitouch: Correct devm device reference for hidinput input_dev name(CVE-2023-53454)

    genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie(CVE-2025-38062)

    pinctrl: check the return value of pinmux_ops::get_function_name()(CVE-2025-40030)

    dm-stripe: fix a possible integer overflow(CVE-2025-39940)

    scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write(CVE-2023-53282)

    drm/vmwgfx: Fix a null-ptr access in the cursor snooper(CVE-2025-40110)

    fs: Prevent file descriptor table allocations exceeding INT_MAX(CVE-2025-39756)

    ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()(CVE-2025-40198)

    tty: n_gsm: fix deadlock and link starvation in outgoing data path(CVE-2022-50116)

    sctp: Fix MAC comparison to be constant-time(CVE-2025-40204)

    tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().(CVE-2025-40186)

    scsi: storvsc: Fix handling of virtual Fibre Channel timeouts(CVE-2023-53245)

    media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()(CVE-2025-39713)

    media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove(CVE-2025-39996)

    nubus: Partially revert proc_create_single_data() conversion(CVE-2023-53217)

    scsi: qla2xxx: Fix deletion race condition(CVE-2023-53615)

    Squashfs: fix uninit-value in squashfs_get_parent(CVE-2025-40049)

    RDMA/hns: Fix double destruction of rsv_qp(CVE-2025-38582)

    cifs: parse_dfs_referrals: prevent oob on malformed input(CVE-2025-40099)

    net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error(CVE-2025-21924)

    net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer(CVE-2025-39937)

    bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls(CVE-2025-38608)

    ACPI: CPPC: Make rmw_lock a raw_spin_lock(CVE-2024-50249)

    ACPI: video: Fix use-after-free in acpi_video_switch_brightness()(CVE-2025-40211)

    smb: client: Fix refcount leak for cifs_sb_tlink(CVE-2025-40103)

    nfsd: decrease sc_count directly if fail to queue dl_recall(CVE-2025-37871)

    iommu/amd: Avoid stack buffer overflow from kernel cmdline(CVE-2025-38676)

    crypto: hisilicon/qm - set NULL to qm-debug.qm_diff_regs(CVE-2025-40062)

    dma-buf: insert memory barrier before updating num_fences(CVE-2025-38095)

    mm/hugetlb: fix folio is still mapped when deleted(CVE-2025-40006)

    ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered(CVE-2025-39763)

    crypto: hisilicon/qm - request reserved interrupt for virtual function(CVE-2025-40136)

    gfs2: Fix possible data races in gfs2_show_options()(CVE-2023-53622)

    mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list(CVE-2025-39725)

    fs/proc: fix uaf in proc_readdir_de()(CVE-2025-40271)

    powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()(CVE-2022-50635)

    be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument     being NULL at be_send_pkt_to_bmc() call site.(CVE-2025-40264)

    fuse: fix livelock in synchronous file put from fuseblk workers(CVE-2025-40220)

    sctp: avoid NULL dereference when chunk data buffer is missing(CVE-2025-40240)

    tipc: Fix use-after-free in tipc_mon_reinit_self().(CVE-2025-40280)

    sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto(CVE-2025-40281)

    scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()(CVE-2025-68229)

    libceph: fix potential use-after-free in have_mon_and_osd_map()(CVE-2025-68285)

    RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem(CVE-2025-38022)

    usbnet: Fix using smp_processor_id() in preemptible code warnings(CVE-2025-40164)

    scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT(CVE-2022-49534)

    NFSD: fix race between nfsd registration and exports_proc(CVE-2025-38232)

    scsi: target: target_core_configfs: Add length check to avoid buffer overflow(CVE-2025-39998)

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()(CVE-2025-38724)

    nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request(CVE-2025-38430)

    HID: core: Harden s32ton() against conversion to 0 bits(CVE-2025-38556)

    iavf: Fix out-of-bounds when setting channels on remove(CVE-2023-53659)

    start_kernel: Add __no_stack_protector function attribute(CVE-2023-53491)

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare(CVE-2025-39817)

    drm/scheduler: fix fence ref counting(CVE-2022-49829)

    scsi: qla2xxx: Wait for io return on terminate rport(CVE-2023-53322)

    scsi: lpfc: Fix buffer free/clear order in deferred receive path(CVE-2025-39841)

    tcp: Clear tcp_sk(sk)-fastopen_rsk in tcp_disconnect().(CVE-2025-39955)

    icmp6: Fix null-ptr-deref of ip6_null_entry-rt6i_idev in icmp6_dev().(CVE-2023-53343)

    cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()(CVE-2025-40194)

    i40e: remove read access to debugfs files(CVE-2025-39901)

    nexthop: Forbid FDB status change while nexthop is in a group(CVE-2025-39980)

    netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed(CVE-2022-50500)

    nfsd: call op_release, even when op_func returns an error(CVE-2023-53241)

    media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID(CVE-2025-40016)

    igb: Fix igb_down hung on surprise removal(CVE-2023-53148)

    __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock(CVE-2025-38058)

    ext4: guard against EA inode refcount underflow in xattr update(CVE-2025-40190)

    ipv6: reject malicious packets in ipv6_gso_segment()(CVE-2025-38572)

    scsi: core: Fix possible memory leak if device_add() fails(CVE-2023-53174)

    md/raid10: fix wrong setting of max_corr_read_errors(CVE-2023-53313)

    lwt: Fix return values of BPF xmit ops(CVE-2023-53338)

    netfilter: ctnetlink: fix refcount leak on table dump(CVE-2025-38721)

    netfilter: ctnetlink: remove refcounting in expectation dumpers(CVE-2025-39764)

    netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm(CVE-2025-39894)

    blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx(CVE-2025-40125)

    cifs: Release folio lock on fscache read hit.(CVE-2023-53593)

    io_uring: wait interruptibly for request completions on exit(CVE-2023-53461)

    net: dlink: handle copy_thresh allocation failure(CVE-2025-40053)

    net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast(CVE-2025-40140)

    i40e: fix idx validation in i40e_validate_queue_map(CVE-2025-39972)

    net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM(CVE-2025-39770)

    ipv6: use RCU in ip6_xmit()(CVE-2025-40135)

    pstore/ram: Check start of empty przs during init(CVE-2023-53331)

    ipv6: use RCU in ip6_output()(CVE-2025-40158)

    net: use dst_dev_rcu() in sk_setup_caps()(CVE-2025-40170)

    KVM: x86: use array_index_nospec with indices that come from guest(CVE-2025-39823)

    vxlan: Annotate FDB data races(CVE-2025-38037)

    drm/vmwgfx: Fix Use-after-free in validation(CVE-2025-40111)

    cifs: fix mid leak during reconnection after timeout threshold(CVE-2023-53597)

    xfs: do not propagate ENODATA disk errors into xattr code(CVE-2025-39835)

    of: check previous kernel's ima-kexec-buffer against memory bounds(CVE-2022-50159)

    Squashfs: reject negative file sizes in squashfs_read_inode()(CVE-2025-40200)

    skmsg: Fix wrong last sg check in sk_msg_recvmsg()(CVE-2022-49973)

    mm/smaps: fix race between smaps_hugetlb_range and migration(CVE-2025-39754)

    Drivers: hv: vmbus: Don't dereference ACPI root object handle(CVE-2023-53647)

    scsi: qla4xxx: Prevent a potential error pointer dereference(CVE-2025-39676)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
319345	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2102)	Nessus	Huawei Local Security Checks	2026/6/6	2026/6/6	critical
343851	Debian dla-4777 : ata-modules-6.1.0-52-armmp-di - security update	Nessus	Debian Local Security Checks	2026/9/8	2026/9/8	high
348098	EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2026-3511)	Nessus	Huawei Local Security Checks	2026/9/18	2026/10/5	critical
275594	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:4111-1)	Nessus	SuSE Local Security Checks	2025/11/18	2026/6/25	high
279677	openSUSE 16 Security Update : kernel (openSUSE-SU-2025:20172-1)	Nessus	SuSE Local Security Checks	2025/12/24	2026/3/6	high
296676	SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2026:0281-1)	Nessus	SuSE Local Security Checks	2026/1/27	2026/6/26	high
298897	Ubuntu 25.10 : Linux kernel vulnerabilities (USN-8029-1)	Nessus	Ubuntu Local Security Checks	2026/2/13	2026/2/13	critical
297598	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1212)	Nessus	Huawei Local Security Checks	2026/2/2	2026/9/18	high
307229	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007468)	Nessus	Unity Linux Local Security Checks	2026/4/17	2026/4/21	high
296481	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0278-1)	Nessus	SuSE Local Security Checks	2026/1/24	2026/1/24	high
302727	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-1582)	Nessus	Huawei Local Security Checks	2026/3/17	2026/9/18	high

検出

プラグインの検索

critical

high

critical

high

high

high

critical

high

high

high

high