The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4476 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4476-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     February 10, 2026                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.162-1~deb11u1     CVE ID         : CVE-2023-52658 CVE-2023-53421 CVE-2023-54285 CVE-2024-42079                      CVE-2024-46786 CVE-2024-49968 CVE-2025-21946 CVE-2025-22022                      CVE-2025-22083 CVE-2025-22090 CVE-2025-22107 CVE-2025-22111                      CVE-2025-22121 CVE-2025-37926 CVE-2025-38022 CVE-2025-38104                      CVE-2025-38125 CVE-2025-38129 CVE-2025-38232 CVE-2025-38361                      CVE-2025-38408 CVE-2025-38591 CVE-2025-38718 CVE-2025-39721                      CVE-2025-39871 CVE-2025-40039 CVE-2025-40110 CVE-2025-40149                      CVE-2025-40164 CVE-2025-40215 CVE-2025-68211 CVE-2025-68223                      CVE-2025-68254 CVE-2025-68255 CVE-2025-68256 CVE-2025-68257                      CVE-2025-68258 CVE-2025-68259 CVE-2025-68261 CVE-2025-68263                      CVE-2025-68264 CVE-2025-68266 CVE-2025-68291 CVE-2025-68325                      CVE-2025-68332 CVE-2025-68335 CVE-2025-68336 CVE-2025-68337                      CVE-2025-68340 CVE-2025-68344 CVE-2025-68345 CVE-2025-68346                      CVE-2025-68347 CVE-2025-68349 CVE-2025-68354 CVE-2025-68362                      CVE-2025-68363 CVE-2025-68364 CVE-2025-68365 CVE-2025-68366                      CVE-2025-68367 CVE-2025-68369 CVE-2025-68371 CVE-2025-68372                      CVE-2025-68380 CVE-2025-68724 CVE-2025-68725 CVE-2025-68727                      CVE-2025-68728 CVE-2025-68732 CVE-2025-68733 CVE-2025-68740                      CVE-2025-68742 CVE-2025-68746 CVE-2025-68753 CVE-2025-68757                      CVE-2025-68758 CVE-2025-68759 CVE-2025-68764 CVE-2025-68765                      CVE-2025-68766 CVE-2025-68767 CVE-2025-68769 CVE-2025-68771                      CVE-2025-68772 CVE-2025-68773 CVE-2025-68774 CVE-2025-68776                      CVE-2025-68777 CVE-2025-68778 CVE-2025-68780 CVE-2025-68781                      CVE-2025-68782 CVE-2025-68783 CVE-2025-68785 CVE-2025-68786                      CVE-2025-68787 CVE-2025-68788 CVE-2025-68795 CVE-2025-68796                      CVE-2025-68797 CVE-2025-68798 CVE-2025-68799 CVE-2025-68800                      CVE-2025-68801 CVE-2025-68803 CVE-2025-68804 CVE-2025-68806                      CVE-2025-68808 CVE-2025-68813 CVE-2025-68814 CVE-2025-68815                      CVE-2025-68816 CVE-2025-68817 CVE-2025-68818 CVE-2025-68819                      CVE-2025-68820 CVE-2025-68821 CVE-2025-71064 CVE-2025-71066                      CVE-2025-71069 CVE-2025-71071 CVE-2025-71075 CVE-2025-71077                      CVE-2025-71078 CVE-2025-71079 CVE-2025-71081 CVE-2025-71082                      CVE-2025-71083 CVE-2025-71084 CVE-2025-71085 CVE-2025-71086                      CVE-2025-71087 CVE-2025-71088 CVE-2025-71091 CVE-2025-71093                      CVE-2025-71094 CVE-2025-71095 CVE-2025-71096 CVE-2025-71097                      CVE-2025-71098 CVE-2025-71102 CVE-2025-71104 CVE-2025-71105                      CVE-2025-71108 CVE-2025-71111 CVE-2025-71112 CVE-2025-71113                      CVE-2025-71114 CVE-2025-71116 CVE-2025-71118 CVE-2025-71119                      CVE-2025-71120 CVE-2025-71121 CVE-2025-71123 CVE-2025-71125                      CVE-2025-71126 CVE-2025-71127 CVE-2025-71130 CVE-2025-71131                      CVE-2025-71132 CVE-2025-71133 CVE-2025-71136 CVE-2025-71137                      CVE-2025-71147 CVE-2025-71149 CVE-2025-71150 CVE-2025-71154                      CVE-2025-71162 CVE-2025-71163 CVE-2025-71180 CVE-2025-71182                      CVE-2025-71183 CVE-2025-71185 CVE-2025-71186 CVE-2025-71189                      CVE-2025-71190 CVE-2025-71191 CVE-2025-71192 CVE-2025-71194                      CVE-2025-71196 CVE-2025-71197 CVE-2025-71199 CVE-2026-22976                      CVE-2026-22977 CVE-2026-22978 CVE-2026-22979 CVE-2026-22980                      CVE-2026-22982 CVE-2026-22984 CVE-2026-22990 CVE-2026-22991                      CVE-2026-22992 CVE-2026-22994 CVE-2026-22997 CVE-2026-22998                      CVE-2026-22999 CVE-2026-23001 CVE-2026-23003 CVE-2026-23005                      CVE-2026-23006 CVE-2026-23010 CVE-2026-23011 CVE-2026-23019                      CVE-2026-23020 CVE-2026-23021 CVE-2026-23025 CVE-2026-23026                      CVE-2026-23030 CVE-2026-23031 CVE-2026-23033 CVE-2026-23037                      CVE-2026-23038 CVE-2026-23047 CVE-2026-23049 CVE-2026-23054                      CVE-2026-23056 CVE-2026-23058 CVE-2026-23060 CVE-2026-23061                      CVE-2026-23063 CVE-2026-23064 CVE-2026-23068 CVE-2026-23069                      CVE-2026-23071 CVE-2026-23073 CVE-2026-23074 CVE-2026-23075                      CVE-2026-23076 CVE-2026-23078 CVE-2026-23080 CVE-2026-23083                      CVE-2026-23084 CVE-2026-23085 CVE-2026-23086 CVE-2026-23087                      CVE-2026-23089 CVE-2026-23090 CVE-2026-23091 CVE-2026-23093                      CVE-2026-23095 CVE-2026-23096 CVE-2026-23097 CVE-2026-23098                      CVE-2026-23099 CVE-2026-23101 CVE-2026-23102 CVE-2026-23103                      CVE-2026-23105 CVE-2026-23107 CVE-2026-23108 CVE-2026-23110     Debian Bug     : 1121535 1122193

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.162-1~deb11u1.  This update also fixes several bugs reported to     Debian.  It additionally includes many more bug fixes from stable     updates 6.1.160-6.1.162 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8116-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - ATM drivers;

    - Drivers core;

    - Network block device driver;

    - Bluetooth drivers;

    - Character device driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Counter interface drivers;

    - CPU frequency scaling framework;

    - Intel Stratix 10 firmware drivers;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Tablet) drivers;

    - ISDN/mISDN subsystem;

    - Macintosh device drivers;

    - Media drivers;

    - MOST (Media Oriented Systems Transport) drivers;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Texas Instruments network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - PA-RISC drivers;

    - PCI subsystem;

    - Chrome hardware platform drivers;

    - x86 platform drivers;

    - ARM PM domains;

    - Voltage and Current Regulator drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - Texas Instruments SoC drivers;

    - SPI subsystem;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Cadence USB3 driver;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Mass Storage drivers;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - Watchdog drivers;

    - BFS file system;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS+ file system;

    - Journaling layer for block devices (JBD2);

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - Proc file system;

    - SMB network file system;

    - XFS file system;

    - BPF subsystem;

    - Ethernet bridge;

    - Memory management;

    - Network traffic control;

    - io_uring subsystem;

    - Locking primitives;

    - Scheduler infrastructure;

    - Shadow Call Stack mechanism;

    - Tracing infrastructure;

    - Bluetooth subsystem;

    - CAIF protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - Ethtool driver;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - SCTP protocol;

    - Network sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - Rust bindings mechanism;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - Turtle Beach Wavefront ALSA driver;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014,     CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121,     CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110,     CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257,     CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264,     CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277,     CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283,     CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313,     CVE-2025-40314, CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322,     CVE-2025-40324, CVE-2025-40331, CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40360,     CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191,     CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68217, CVE-2025-68220,     CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245,     CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264,     CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287,     CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302,     CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321, CVE-2025-68325, CVE-2025-68327,     CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,     CVE-2025-68337, CVE-2025-68339, CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354,     CVE-2025-68362, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724,     CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740,     CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765,     CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777,     CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788,     CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,     CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,     CVE-2025-68816, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-71064,     CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,     CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085,     CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096,     CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108,     CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118,     CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132,     CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71180,     CVE-2025-71182, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982,     CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-23019, CVE-2026-23020,     CVE-2026-23021, CVE-2026-23047)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8204-1 advisory.

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD     Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A     privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of     integrity and confidentiality. (CVE-2024-36347)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - MIPS architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Network block device driver;

    - Bluetooth drivers;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - GPU drivers;

    - Hardware monitoring drivers;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Macintosh device drivers;

    - Multiple devices driver;

    - Media drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - PA-RISC drivers;

    - Chrome hardware platform drivers;

    - x86 platform drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SPI subsystem;

    - Media Oriented Systems Transport (MOST) driver;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - USB Host Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Watchdog drivers;

    - BFS file system;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS+ file system;

    - File systems infrastructure;

    - Journaling layer for block devices (JBD2);

    - Network file system (NFS) client;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - SMB network file system;

    - BPF subsystem;

    - Ethernet bridge;

    - io_uring subsystem;

    - Locking primitives;

    - Scheduler infrastructure;

    - Shadow Call Stack mechanism;

    - Tracing infrastructure;

    - Memory management;

    - CAIF protocol;

    - Ceph Core library;

    - Networking core;

    - Ethtool driver;

    - Handshake API;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Network sockets;

    - Sun RPC protocol;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - Turtle Beach Wavefront ALSA driver;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM subsystem; (CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022, CVE-2025-38234,     CVE-2025-40164, CVE-2025-40325, CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256,     CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263, CVE-2025-68264,     CVE-2025-68265, CVE-2025-68266, CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335,     CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346, CVE-2025-68347,     CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,     CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374, CVE-2025-68378,     CVE-2025-68379, CVE-2025-68380, CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732,     CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744, CVE-2025-68746,     CVE-2025-68753, CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,     CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767, CVE-2025-68769,     CVE-2025-68770, CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,     CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783,     CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795,     CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,     CVE-2025-68804, CVE-2025-68806, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811,     CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818,     CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,     CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072, CVE-2025-71075,     CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71080, CVE-2025-71081, CVE-2025-71082,     CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088,     CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096,     CVE-2025-71097, CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,     CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113,     CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121,     CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126, CVE-2025-71127, CVE-2025-71130,     CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137,     CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143, CVE-2025-71144, CVE-2025-71147,     CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154,     CVE-2026-23209)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    net: netpoll: fix incorrect refcount handling causing incorrect cleanup(CVE-2025-68245)

    ftrace: Fix softlockup in ftrace_module_enable(CVE-2025-68173)

    ima: Handle error code returned by ima_filter_rule_match()(CVE-2025-68740)

    netfilter: nft_ct: add seqadj extension for natted connections(CVE-2025-68206)

    tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()(CVE-2025-68188)

    page_pool: always add GFP_NOWARN for ATOMIC allocations(CVE-2025-68321)

    net: bridge: fix use-after-free due to MST port state bypass(CVE-2025-40297)

    net/mlx5: Clean up only new IRQ glue on request_irq() failure(CVE-2025-40250)

    net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()(CVE-2025-40252)

    KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced(CVE-2025-68259)

    crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id(CVE-2025-68724)

    xfrm: delete x-tunnel as we delete x(CVE-2025-40215)

    erofs: avoid infinite loops due to corrupted subpage compact indexes(CVE-2025-68251)

    ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr(CVE-2025-68183)

    bonding: provide a net pointer to __skb_flow_dissect()(CVE-2026-23119)

    KVM: Don't clobber irqfd routing type when deassigning irqfd(CVE-2026-23198)

    NFS: Fix a deadlock involving nfs_release_folio()(CVE-2026-23053)

    btrfs: don't log conflicting inode if it's a dir moved in the current transaction(CVE-2025-68778)

    tracing: Fix crash on synthetic stacktrace field usage(CVE-2026-23088)

    crypto: aead - Fix reqsize handling(CVE-2025-68726)

    fs/xattr: missing fdput() in fremovexattr error path(CVE-2024-14027)

    uacce: ensure safe queue release with state management(CVE-2026-23063)

    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()(CVE-2026-23111)

    l2tp: avoid one data-race in l2tp_tunnel_del_work()(CVE-2026-23120)

    net: fix segmentation of forwarding fraglist GRO(CVE-2026-23154)

    netfilter: nf_conncount: update last_gc only when GC has been performed(CVE-2026-23139)

    ipv6: annotate data-race in ndisc_router_discovery()(CVE-2026-23124)

    ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF(CVE-2026-23200)

    uacce: fix isolate sysfs check condition(CVE-2026-23094)

    regmap: Fix race condition in hwspinlock irqsave routine(CVE-2026-23071)

    nvme-fc: use lock accessing port_state and rport state(CVE-2025-40342)

    SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf(CVE-2025-71120)

    nvmet-fc: avoid scheduling association deletion twice(CVE-2025-40343)

    smb: client: fix potential UAF in smb2_close_cached_fid()(CVE-2025-40328)

    tracing: Do not register unsupported perf events(CVE-2025-71125)

    drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb(CVE-2025-40329)

    cifs: client: fix memory leak in smb3_fs_context_parse_param(CVE-2025-40268)

    nvme-multipath: fix lockdep WARN due to partition scan work(CVE-2025-68218)

    bpf: Do not let BPF test infra emit invalid GSO types to stack(CVE-2025-68725)

    bpf: Check skb-transport_header is set in bpf_skb_check_mtu(CVE-2025-68363)

    binfmt_misc: restore write access before closing files opened by open_exec()(CVE-2025-68239)

    fbcon: Set fb_display[i]-mode to NULL when the mode is released(CVE-2025-40323)

    usb: gadget: udc: fix use-after-free in usb_gadget_state_work(CVE-2025-68282)

    drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE(CVE-2025-40277)

    ipv4: Fix reference count leak when using error routes with nexthop objects(CVE-2025-71097)

    futex: Don't leak robust_list pointer on exec race(CVE-2025-40341)

    ksm: use range-walk function to jump over holes in scan_get_next_rmap_item(CVE-2025-68211)

    cifs: fix memory leak in smb3_fs_context_parse_param error path(CVE-2025-68219)

    e1000: fix OOB in e1000_tbi_should_accept()(CVE-2025-71093)

    net/mlx5: fw_tracer, Validate format string parameters(CVE-2025-68816)

    scsi: smartpqi: Fix device resources accessed after device removal(CVE-2025-68371)

    x86/CPU/AMD: Add RDSEED fix for Zen5(CVE-2025-68313)

    ipv6: Fix use-after-free in inet6_addr_del().(CVE-2026-23010)

    macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse(CVE-2025-68367)

    s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump(CVE-2025-68310)

    virtio-net: fix received length check in big packets(CVE-2025-40292)

    iavf: fix off-by-one issues in iavf_config_rss_reg()(CVE-2025-71087)

    vsock: Ignore signal/timeout on connect() if already established(CVE-2025-40248)

    scsi: qla2xxx: Clear cmds after chip reset(CVE-2025-68745)

    NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid(CVE-2025-68349)

    RDMA/cm: Fix leaking the multicast GID table reference(CVE-2025-71084)

    KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer(CVE-2025-71104)

    usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data     transfer(CVE-2025-68331)

    net: hns3: add VLAN id validation before using(CVE-2025-71112)

    media: imon: make send_packet() more robust(CVE-2025-68194)

    smb: client: fix memory leak in cifs_construct_tcon()(CVE-2025-68295)

    bpf: Fix stackmap overflow check in __bpf_get_stackid()(CVE-2025-68378)

    net: hns3: using the num_tqps in the vf driver to apply for resources(CVE-2025-71064)

    nvme: fix admin request_queue lifetime(CVE-2025-68265)

    net: openvswitch: fix middle attribute validation in push_nsh() action(CVE-2025-68785)

    net: fix memory leak in skb_segment_list for GRO packets(CVE-2026-22979)

    ipv4: ip_gre: make ipgre_header() robust(CVE-2026-23011)

    ip6_gre: make ip6gre_header() robust(CVE-2025-71098)

    ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()(CVE-2025-71085)

    svcrdma: bound check rq_pages index in inline path(CVE-2025-71068)

    inet: frags: flush pending skbs in fqdir_pre_exit()(CVE-2025-68768)

    ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()(CVE-2026-23003)

    net: sock: fix hardened usercopy panic in sock_recv_errqueue(CVE-2026-22977)

    HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()(CVE-2025-39808)

    ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

    can: j1939: make j1939_session_activate() fail if device is no longer registered(CVE-2025-71182)

    regulator: dummy: force synchronous probing(CVE-2025-22009)

    net/mlx5e: Fix crash on profile change rollback failure(CVE-2026-23000)

    net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv(CVE-2026-22996)

    driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()(CVE-2025-21810)

    crypto: aspeed - fix double free caused by devm(CVE-2025-68172)

    macvlan: fix possible UAF in macvlan_forward_source()(CVE-2026-23001)

    RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly(CVE-2025-71096)

    wifi: avoid kernel-infoleak from struct iw_point(CVE-2026-22978)

    crypto: seqiv - Do not use req-iv after crypto_aead_encrypt(CVE-2025-71131)

    bpf: Fix reference count leak in bpf_prog_test_run_xdp()(CVE-2026-22994)

    net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv(CVE-2026-23035)

    driver core: Fix a potential null-ptr-deref in module_add_driver()(CVE-2024-47688)

    crypto: af_alg - zero initialize memory allocated via sock_kmalloc(CVE-2025-71113)

    HID: multitouch: Add NULL check in mt_input_configured(CVE-2024-58020)

    net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second     rts(CVE-2026-22997)

    netfilter: nf_tables: avoid chain re-validation if possible(CVE-2025-71160)

    ipvs: fix ipv4 null-ptr-deref in route error path(CVE-2025-68813)

    bpf: Sync pending IRQ work before freeing ring buffer(CVE-2025-40319)

    scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()(CVE-2025-68229)

    net/handshake: duplicate handshake cancellations leak socket(CVE-2025-68775)

    PCI/AER: Fix NULL pointer access by aer_info(CVE-2025-68309)

    bpf: account for current allocated stack depth in widen_imprecise_scalars()(CVE-2025-68208)

    ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe(CVE-2025-68241)

    drm/sysfb: Do not dereference NULL pointer in plane reset(CVE-2025-40360)

    usb: storage: Fix memory leak in USB bulk transport(CVE-2025-68288)

    net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ(CVE-2025-40350)

    bpf: Free special fields when update [lru_,]percpu_hash maps(CVE-2025-68744)

    ipvlan: Make the addrs_lock be per port(CVE-2026-23103)

    usbnet: Prevents free active kevent(CVE-2025-68312)

    net/handshake: restore destructor on submit failure(CVE-2025-71148)

    x86/fpu: Ensure XFD state on signal delivery(CVE-2025-68171)

    devlink: rate: Unset parent pointer in devl_rate_nodes_destroy(CVE-2025-40251)

    md: fix rcu protection in md_wakeup_thread(CVE-2025-68374)

    vsock: fix lock inversion in vsock_assign_transport()(CVE-2025-40231)

    NFSD: free copynotify stateid in nfs4_free_ol_stateid()(CVE-2025-40273)

    net: ipv6: fix field-spanning memcpy warning in AH output(CVE-2025-40363)

    smb: client: fix potential cfid UAF in smb2_query_info_compound(CVE-2025-40320)

    iomap: adjust read range correctly for non-block-aligned positions(CVE-2025-68794)

    NFSD: NFSv4 file creation neglects setting ACL(CVE-2025-68803)

    mm, shmem: prevent infinite loop on truncate race(CVE-2026-23177)

    ALSA: usb-mixer: us16x08: validate meter packet indices(CVE-2025-68783)

    perf/x86/amd: Check event before enable to avoid GPF(CVE-2025-68798)

    mm/secretmem: fix use-after-free race in fault handler(CVE-2025-40272)

    usb: typec: ucsi: Handle incorrect num_connectors capability(CVE-2025-71108)

    mm/page_alloc: prevent pcp corruption with SMP=n(CVE-2026-23025)

    shmem: fix recovery on rename failures(CVE-2025-71072)

    x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1(CVE-2026-23005)

    leds: led-class: Only Add LED to leds_list when it is fully ready(CVE-2026-23101)

    scsi: qla2xxx: Fix bsg_done() causing double free(CVE-2025-71238)

    iommu: disable SVA when CONFIG_X86 is set(CVE-2025-71089)

    mm/shmem, swap: fix race of truncate and swap entry split(CVE-2026-23161)

    crypto: authencesn - reject too-short AAD (assoclen8) to match ESP/ESN spec(CVE-2026-23060)

    fsnotify: do not generate ACCESS/MODIFY events on child for special files(CVE-2025-68788)

    scsi: target: Reset t_task_cdb pointer in error case(CVE-2025-68782)

    drm/ttm: Avoid NULL pointer deref for evicted BOs(CVE-2025-71083)

    f2fs: fix to avoid potential deadlock(CVE-2025-71065)

    pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()(CVE-2026-23038)

    sched/deadline: only set free_cpus for online runqueues(CVE-2025-68780)

    iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED(CVE-2025-71122)

    ext4: xattr: fix null pointer deref in ext4_raw_inode()(CVE-2025-68820)

    flex_proportions: make fprop_new_period() hardirq safe(CVE-2026-23168)

    scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path'(CVE-2025-68818)

    Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

    pNFS: Fix a deadlock when returning a delegation during open()(CVE-2026-23050)

    fuse: fix readahead reclaim deadlock(CVE-2025-68821)

    tpm: Cap the number of PCR banks(CVE-2025-71077)

    btrfs: always detect conflicting inodes when logging inode refs(CVE-2025-71183)

    ACPICA: Avoid walking the Namespace if start_node is NULL(CVE-2025-71118)

    io_uring/poll: correctly handle io_poll_add() return value on update(CVE-2025-71149)

    mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure(CVE-2026-23144)

    nfsd: provide locking for v4_end_grace(CVE-2026-22980)

    ext4: fix string copying in parse_apply_sb_mount_options()(CVE-2025-71123)

    powerpc/kexec: Enable SMT before waking offline CPUs(CVE-2025-71119)

    block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set-tag_list_lock(CVE-2025-68756)

    media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()(CVE-2025-68819)

    null_blk: fix kmemleak by releasing references to fault configfs items(CVE-2026-23032)

    via_wdt: fix critical boot hang due to unnamed resource allocation(CVE-2025-71114)

    f2fs: use global inline_xattr_slab instead of per-sb slab cache(CVE-2025-71105)

    crypto: virtio - Add spinlock protection with virtqueue notification(CVE-2026-23229)

    This vulnerability affects the function nvmet_tcp_handle_h2c_data_pdu.(CVE-2026-22998)

    arm64/fpsimd: signal: Fix restoration of SVE context(CVE-2026-23102)

    crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly(CVE-2026-23222)

    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags(CVE-2025-68764)

    macvlan: fix error recovery in macvlan_common_newlink()(CVE-2026-23209)

    KEYS: trusted: Fix a memory leak in tpm2_load_cmd(CVE-2025-71147)

    scsi: qla2xxx: Sanitize payload size to prevent member overflow(CVE-2026-23059)

    mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure(CVE-2026-23142)

    io_uring: fix filename leak in __io_openat_prep()(CVE-2025-68814)

    mlx5: Fix default values in create CQ(CVE-2025-68209)

    In the Linux kernel, the is_open, has_lease and on_list bitfields are stored in the same byte in struct     cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments     generate byte read-modify-write operations, so updating one flag can restore stale values of the others.
    To avoid this class of races, convert these flags to separate bool fields.(CVE-2026-23230)

    drm/msm/dpu: Add missing NULL pointer check for pingpong interface(CVE-2025-71138)

    cifs: Fix memory and information leak in smb3_reconfigure()(CVE-2025-71151)

    sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT(CVE-2026-23125)

    net/sched: cls_u32: use skb_header_pointer_careful()(CVE-2026-23204)

    ext4: refresh inline data size before write operations(CVE-2025-68264)

    efivarfs: fix error propagation in efivar_entry_get()(CVE-2026-23156)

    io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop(CVE-2026-23113)

    scsi: qla2xxx: Fix improper freeing of purex item(CVE-2025-68741)

    tracing: Add recursion protection in kernel stack trace recording(CVE-2026-23138)

    bonding: limit BOND_MODE_8023AD to Ethernet devices(CVE-2026-23099)

    md: suspend array while updating raid_disks via sysfs(CVE-2025-71225)

    uacce: fix cdev handling in the cleanup path(CVE-2026-23096)

    bpf: Fix invalid prog-stats access when update_effective_progs fails(CVE-2025-68742)

    nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot(CVE-2025-68235)

    ocfs2: clear extent cache after moving/defragmenting extents(CVE-2025-40233)

    migrate: correct lock ordering for hugetlb file folios(CVE-2026-23097)

    scsi: qla2xxx: Free sp in error path to fix system crash(CVE-2025-71232)

    scsi: qla2xxx: Delay module unload while fabric scan in progress(CVE-2025-71235)

    smb/client: fix memory leak in smb2_open_file()(CVE-2026-23205)

    nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()(CVE-2026-23179)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()(CVE-2026-23216)

    nbd: defer config put in recv_work(CVE-2025-68372)

    ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()(CVE-2025-68261)

    bpf: Add bpf_prog_run_data_pointers()(CVE-2025-68200)

    usb: storage: sddr55: Reject out-of-bound new_pba(CVE-2025-40345)

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec(CVE-2026-23112)

    scsi: sg: Do not sleep in atomic context(CVE-2025-40259)

    mm/damon/vaddr: do not repeat pte_offset_map_lock() until success(CVE-2025-40218)

    mm/huge_memory: fix NULL pointer deference when splitting folio(CVE-2025-68293)

    A NULL pointer dereference vulnerability exists in the SCSI qla2xxx driver subsystem of the Linux kernel.
    When the system attempts to free associated memory in the qla_fab_async_scan function, it fails to     validate whether the sp pointer is NULL, leading to kernel NULL pointer dereference and system crashes.
    This vulnerability can be exploited by attackers to cause denial of service.(CVE-2025-71236)

    crash: fix crashkernel resource shrink(CVE-2025-68198)

    jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted(CVE-2025-68337)

    bonding: annotate data-races around slave-last_rx(CVE-2026-23212)

    bonding: fix use-after-free due to enslave fail after slave array update(CVE-2026-23171)

    scsi: core: Wake up the error handler when final completions race against each other(CVE-2026-23110)

    blk-cgroup: fix possible deadlock while configuring policy(CVE-2025-68178)

    nbd: defer config unlock in nbd_genl_connect(CVE-2025-68366)

    drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup(CVE-2025-68296)

    nvme: nvme-fc: Ensure -ioerr_work is cancelled in nvme_fc_delete_ctrl()(CVE-2025-40261)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()(CVE-2026-23193)

    uacce: implement mremap in uacce_vm_ops to return -EPERM(CVE-2026-23056)

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()(CVE-2026-23231)

    vsock/virtio: cap TX credit to local buffer size(CVE-2026-23086)

    bpf, test_run: Subtract size of xdp_frame from allowed metadata size(CVE-2026-23140)

    vsock/virtio: fix potential underflow in virtio_transport_get_credit()(CVE-2026-23069)

    netdevsim: fix a race issue related to the operation on bpf_bound_progs list(CVE-2026-23126)

    net: hv_netvsc: reject RSS hash key programming without RX indirection table(CVE-2026-23054)

    fbdev: bitblit: bound-check glyph index in bit_putcs*(CVE-2025-40322)

    regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex(CVE-2025-68354)

    mtdchar: fix integer overflow in read/write ioctls(CVE-2025-68237)

    arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()(CVE-2025-40346)

    fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds(CVE-2025-40304)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
298659	Debian dla-4476 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2026/2/11	2026/3/24	high
296680	SUSE SLES15 / openSUSE 15 : Security update for the Linux Kernel (SUSE-SU-2026:0293-1)	Nessus	SuSE Local Security Checks	2026/1/27	2026/9/29	high
303752	Ubuntu Pro Realtime 22.04 LTS : Linux kernel (Intel IoTG Real-time) vulnerabilities (USN-8116-1)	Nessus	Ubuntu Local Security Checks	2026/3/25	2026/3/25	high
299777	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50112)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/3/4	high
310122	Ubuntu Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-8204-1)	Nessus	Ubuntu Local Security Checks	2026/4/24	2026/4/24	high
377338	EulerOS Virtualization 2.15.1 : kernel (EulerOS-SA-2026-4557)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	critical

検出

プラグインの検索

high

high

high

high

high

critical