arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001079 advisory.

    arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when     CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite     loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-1135:09 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2013-4312     The Linux kernel before 4.4.1 allows local users to bypass     file-descriptor limits and cause a denial of service (memory     consumption) by sending each descriptor over a UNIX socket before     closing it, related to net/unix/af_unix.c and net/unix/garbage.c.
    CVE-2015-8374     fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles     compressed inline extents, which allows local users to obtain     sensitive pre-truncation information from a file via a clone action.
    CVE-2015-8543     The networking implementation in the Linux kernel through 4.3.3, as     used in Android and other products, does not validate protocol     identifiers for certain protocol families, which allows local users to     cause a denial of service (NULL function pointer dereference and     system crash) or possibly gain privileges by leveraging CLONE_NEWUSER     support to execute a crafted SOCK_RAW application.
    CVE-2015-8746     fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2     does not properly initialize memory for migration recovery operations,     which allows remote NFS servers to cause a denial of service (NULL     pointer dereference and panic) via crafted network traffic.
    CVE-2015-8812     drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5     does not properly identify error conditions, which allows remote     attackers to execute arbitrary code or cause a denial of service     (use-after-free) via crafted packets.
    CVE-2015-8844     The signal implementation in the Linux kernel before 4.3.5 on powerpc     platforms does not check for an MSR with both the S and T bits set,     which allows local users to cause a denial of service (TM Bad Thing     exception and panic) via a crafted application.
    CVE-2015-8845     The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the     Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM     suspend mode exists before proceeding with a tm_reclaim call, which     allows local users to cause a denial of service (TM Bad Thing     exception and panic) via a crafted application.
    CVE-2015-8956     The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the     Linux kernel before 4.2 allows local users to obtain sensitive     information or cause a denial of service (NULL pointer dereference)     via vectors involving a bind system call on a Bluetooth RFCOMM socket.
    CVE-2016-2053     The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux     kernel before 4.3 allows attackers to cause a denial of service     (panic) via an ASN.1 BER file that lacks a public key, leading to     mishandling by the public_key_verify_signature function in     crypto/asymmetric_keys/public_key.c.
    CVE-2016-2069     Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1     allows local users to gain privileges by triggering access to a paging     structure by a different CPU.
    CVE-2016-2117     The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in     the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O,     which allows remote attackers to obtain sensitive information from     kernel memory by reading packet data.
    CVE-2016-2384     Double free vulnerability in the snd_usbmidi_create function in     sound/usb/midi.c in the Linux kernel before 4.5 allows physically     proximate attackers to cause a denial of service (panic) or possibly     have unspecified other impact via vectors involving an invalid USB     descriptor.
    CVE-2016-2847     fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of     unread data in pipes, which allows local users to cause a denial of     service (memory consumption) by creating many pipes with non-default     sizes.
    CVE-2016-3070     The trace_writeback_dirty_page implementation in     include/trace/events/writeback.h in the Linux kernel before 4.4     improperly interacts with mm/migrate.c, which allows local users to     cause a denial of service (NULL pointer dereference and system crash)     or possibly have unspecified other impact by triggering a certain page     move.
    CVE-2016-3156     The IPv4 implementation in the Linux kernel before 4.5.2 mishandles     destruction of device objects, which allows guest OS users to cause a     denial of service (host OS networking outage) by arranging for a large     number of IP addresses.
    CVE-2016-3699     The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat     Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows     local users to bypass intended Secure Boot restrictions and execute     untrusted code by appending ACPI tables to the initrd.
    CVE-2016-3841     The IPv6 stack in the Linux kernel before 4.3.3 mishandles options     data, which allows local users to gain privileges or cause a denial of     service (use-after-free and system crash) via a crafted sendmsg system     call.
    CVE-2016-4569     The snd_timer_user_params function in sound/core/timer.c in the Linux     kernel through 4.6 does not initialize a certain data structure, which     allows local users to obtain sensitive information from kernel stack     memory via crafted use of the ALSA timer interface.
    CVE-2016-4578     sound/core/timer.c in the Linux kernel through 4.6 does not initialize     certain r1 data structures, which allows local users to obtain     sensitive information from kernel stack memory via crafted use of the     ALSA timer interface, related to the (1) snd_timer_user_ccallback and     (2) snd_timer_user_tinterrupt functions.
    CVE-2016-4581     fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse     a mount propagation tree in a certain case involving a slave mount,     which allows local users to cause a denial of service (NULL pointer     dereference and OOPS) via a crafted series of mount system calls.
    CVE-2016-4794     Use-after-free vulnerability in mm/percpu.c in the Linux kernel     through 4.6 allows local users to cause a denial of service (BUG) or     possibly have unspecified other impact via crafted use of the mmap and     bpf system calls.
    CVE-2016-5412     arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through     4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled,     allows guest OS users to cause a denial of service (host OS infinite     loop) by making a H_CEDE hypercall during the existence of a suspended     transaction.
    CVE-2016-5828     The start_thread function in arch/powerpc/kernel/process.c in the     Linux kernel through 4.6.3 on powerpc platforms mishandles     transactional state, which allows local users to cause a denial of     service (invalid process state or TM Bad Thing exception, and system     crash) or possibly have unspecified other impact by starting and     suspending a transaction before an exec system call.
    CVE-2016-5829     Multiple heap-based buffer overflows in the hiddev_ioctl_usage     function in drivers/hid/usbhid/hiddev.c in the Linux kernel through     4.6.3 allow local users to cause a denial of service or possibly have     unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2)     HIDIOCSUSAGES ioctl call.
    CVE-2016-6136     Race condition in the audit_log_single_execve_arg function in     kernel/auditsc.c in the Linux kernel through 4.7 allows local users to     bypass intended character-set restrictions or disrupt system-call     auditing by changing a certain string, aka a double fetch     vulnerability.
    CVE-2016-6198     The filesystem layer in the Linux kernel before 4.5.5 proceeds with     post-rename operations after an OverlayFS file is renamed to a     self-hardlink, which allows local users to cause a denial of service     (system crash) via a rename system call, related to fs/namei.c and     fs/open.c.
    CVE-2016-6327     drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1     allows local users to cause a denial of service (NULL pointer     dereference and system crash) by using an ABORT_TASK command to abort     a device write operation.
    CVE-2016-6480     Race condition in the ioctl_send_fib function in     drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows     local users to cause a denial of service (out-of-bounds access or     system crash) by changing a certain size value, aka a double fetch     vulnerability.
    Additional Changes:

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003470 advisory.

    arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when     CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite     loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003244 advisory.

    arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when     CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite     loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - Linux kernel built with the KVM visualization support     (CONFIG_KVM), with nested visualization(nVMX) feature     enabled(nested=1), is vulnerable to host memory leakage     issue. It could occur while emulating VMXON instruction     in 'handle_vmon'. An L1 guest user could use this flaw     to leak host memory potentially resulting in     DoS.(CVE-2017-2596i1/4%0

  - The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST     extension implementations in the sk_run_filter function     in net/core/filter.c in the Linux kernel through 3.14.3     do not check whether a certain length value is     sufficiently large, which allows local users to cause a     denial of service (integer underflow and system crash)     via crafted BPF instructions. NOTE: the affected code     was moved to the __skb_get_nlattr and
    __skb_get_nlattr_nest functions before the     vulnerability was announced.(CVE-2014-3144i1/4%0

  - A flaw was found in the Linux kernel when freeing pages     in hugetlbfs. This could trigger a local denial of     service by crashing the kernel.(CVE-2017-15127i1/4%0

  - An issue was discovered in the Linux kernel before 4.8.
    Incorrect access checking in overlayfs mounts could be     used by local attackers to modify or truncate files in     the underlying filesystem.(CVE-2018-16597i1/4%0

  - Memory leak in the cuse_channel_release function in     fs/fuse/cuse.c in the Linux kernel before 4.4 allows     local users to cause a denial of service (memory     consumption) or possibly have unspecified other impact     by opening /dev/cuse many times.(CVE-2015-1339i1/4%0

  - A flaw was found in the way the Linux kernel's nested     NMI handler and espfix64 functionalities interacted     during NMI processing. A local, unprivileged user could     use this flaw to crash the system or, potentially,     escalate their privileges on the     system.(CVE-2015-3290i1/4%0

  - Multiple array index errors in     drivers/hid/hid-multitouch.c in the Human Interface     Device (HID) subsystem in the Linux kernel through     3.11, when CONFIG_HID_MULTITOUCH is enabled, allow     physically proximate attackers to cause a denial of     service (heap memory corruption, or NULL pointer     dereference and OOPS) via a crafted     device.(CVE-2013-2897i1/4%0

  - A flaw was found in the way the Linux kernel's futex     subsystem handled the requeuing of certain Priority     Inheritance (PI) futexes. A local, unprivileged user     could use this flaw to escalate their privileges on the     system.(CVE-2014-3153i1/4%0

  - The XFS subsystem in the Linux kernel 4.4 and later     allows local users to cause a denial of service     (fdatasync() failure and system hang) by using the vfs     syscall group in the 'trinity' program, as a result of     a page lock order bug in the XFS seek hole/data     implementation.(CVE-2016-8660i1/4%0

  - A flaw was found in the Linux kernel's key management     system where it was possible for an attacker to     escalate privileges or crash the machine. If a user key     gets negatively instantiated, an error code is cached     in the payload area. A negatively instantiated key may     be then be positively instantiated by updating it with     valid data. However, the -i1/4zupdate key type method     must be aware that the error code may be     there.(CVE-2015-8539i1/4%0

  - It was found that the Linux kernel KVM subsystem's     sysenter instruction emulation was not sufficient. An     unprivileged guest user could use this flaw to escalate     their privileges by tricking the hypervisor to emulate     a SYSENTER instruction in 16-bit mode, if the guest OS     did not initialize the SYSENTER model-specific     registers (MSRs). Note: Certified guest operating     systems for Red Hat Enterprise Linux with KVM do     initialize the SYSENTER MSRs and are thus not     vulnerable to this issue when running on a KVM     hypervisor.(CVE-2015-0239i1/4%0

  - An information leak flaw was found in the way the Linux     kernel handled media device enumerate entities IOCTL     requests. A local user able to access the /dev/media0     device file could use this flaw to leak kernel memory     bytes.(CVE-2014-1739i1/4%0

  - The dgnc_mgmt_ioctl function in     drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel     through 4.3.3 does not initialize a certain structure     member, which allows local users to obtain sensitive     information from kernel memory via a crafted     application.(CVE-2015-7885i1/4%0

  - An information leak was discovered in the Linux kernel     in cdrom_ioctl_drive_status() function in     drivers/cdrom/cdrom.c that could be used by local     attackers to read kernel memory at certain     location.(CVE-2018-16658i1/4%0

  - A flaw was discovered in the Linux kernel's     implementation of VFIO. An attacker issuing an ioctl     can create a situation where memory is corrupted and     modify memory outside of the expected area. This may     overwrite kernel memory and subvert kernel     execution.(CVE-2016-9083i1/4%0

  - It was found that the Linux kernel's KVM subsystem did     not handle the VM exits gracefully for the invvpid     (Invalidate Translations Based on VPID) instructions.
    On hosts with an Intel processor and invppid VM exit     support, an unprivileged guest user could use these     instructions to crash the guest.(CVE-2014-3646i1/4%0

  - An attacker on a network could abuse a flaw in the IPv6     stack fragment reassembly code to induce kernel memory     corruption on the system, possibly leading to a system     crash.(CVE-2016-9755i1/4%0

  - It was found that a regular user could remove xattr     permissions on files by using the chown or write system     calls. A local attacker could use this flaw to deny     elevated permissions from valid users, services, or     applications, potentially resulting in a denial of     service.(CVE-2015-1350i1/4%0

  - arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux     kernel through 4.7 on PowerPC platforms, when     CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS     users to cause a denial of service (host OS infinite     loop) by making a H_CEDE hypercall during the existence     of a suspended transaction.(CVE-2016-5412i1/4%0

  - An issue was discovered in the proc_pid_stack function     in fs/proc/base.c in the Linux kernel. An attacker with     a local account can trick the stack unwinder code to     leak stack contents to userspace. The fix allows only     root to inspect the kernel stack of an arbitrary     task.(CVE-2018-17972i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - It was found that the Linux kernel's IPv6 implementation     mishandled socket options. A local attacker could abuse     concurrent access to the socket options to escalate     their privileges, or cause a denial of service     (use-after-free and system crash) via a crafted sendmsg     system call. (CVE-2016-3841, Important)

(CVE-2013-4312, CVE-2015-8374, CVE-2015-8543, CVE-2015-8812, CVE-2015-8844, CVE-2015-8845, CVE-2016-2053, CVE-2016-2069, CVE-2016-2847, CVE-2016-3156, CVE-2016-4581, CVE-2016-4794, CVE-2016-5412, CVE-2016-5828, CVE-2016-5829, CVE-2016-6136, CVE-2016-6198, CVE-2016-6327, CVE-2016-6480, CVE-2015-8746, CVE-2015-8956, CVE-2016-2117, CVE-2016-2384, CVE-2016-3070, CVE-2016-3699, CVE-2016-4569, CVE-2016-4578)

Additional Changes :

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call. (CVE-2016-3841, Important)

* Several Moderate and Low impact security issues were found in the Linux kernel. Space precludes documenting each of these issues in this advisory. Refer to the CVE links in the References section for a description of each of these vulnerabilities. (CVE-2013-4312, CVE-2015-8374, CVE-2015-8543, CVE-2015-8812, CVE-2015-8844, CVE-2015-8845, CVE-2016-2053, CVE-2016-2069, CVE-2016-2847, CVE-2016-3156, CVE-2016-4581, CVE-2016-4794, CVE-2016-5412, CVE-2016-5828, CVE-2016-5829, CVE-2016-6136, CVE-2016-6198, CVE-2016-6327, CVE-2016-6480, CVE-2015-8746, CVE-2015-8956, CVE-2016-2117, CVE-2016-2384, CVE-2016-3070, CVE-2016-3699, CVE-2016-4569, CVE-2016-4578)

Red Hat would like to thank Philip Pettersson (Samsung) for reporting CVE-2016-2053; Tetsuo Handa for reporting CVE-2016-2847; the Virtuozzo kernel team and Solar Designer (Openwall) for reporting CVE-2016-3156;
Justin Yackoski (Cryptonite) for reporting CVE-2016-2117; and Linn Crosetto (HP) for reporting CVE-2016-3699. The CVE-2015-8812 issue was discovered by Venkatesh Pottem (Red Hat Engineering); the CVE-2015-8844 and CVE-2015-8845 issues were discovered by Miroslav Vadkerti (Red Hat Engineering); the CVE-2016-4581 issue was discovered by Eric W. Biederman (Red Hat); the CVE-2016-6198 issue was discovered by CAI Qian (Red Hat); and the CVE-2016-3070 issue was discovered by Jan Stancek (Red Hat).

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2574 advisory.

    - [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Larry Woodman) [1385124] {CVE-2016-5195}
    - [net] add recursion limit to GRO (Sabrina Dubroca) [1374191] {CVE-2016-7039}
    - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359306]     {CVE-2016-6136}
    - [scsi] aacraid: Check size values after double-fetch from user (Maurizio Lombardi) [1369771]     {CVE-2016-6480}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3084-4 advisory.

    Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker     could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136)

    It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel     for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could     cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412)

    Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3084-3 advisory.

    Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker     could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136)

    It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel     for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could     cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412)

    Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3084-2 advisory.

    USN-3084-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu     14.04 LTS.

    Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker     could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136)

    It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel     for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could     cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412)

    Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3084-1 advisory.

    Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker     could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136)

    It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel     for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could     cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412)

    Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The v4.6.6 update contains a number of important fixes across the tree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.6.6 update contains a number of important fixes across the tree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
291242	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001079)	Nessus	Unity Linux Local Security Checks	medium
289409	MiracleLinux 7 : kernel-3.10.0-514.el7 (AXSA:2016-1135:09)	Nessus	Miracle Linux Local Security Checks	critical
287889	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003470)	Nessus	Unity Linux Local Security Checks	medium
286990	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003244)	Nessus	Unity Linux Local Security Checks	medium
124971	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)	Nessus	Huawei Local Security Checks	high
95841	Scientific Linux Security Update : kernel on SL7.x x86_64 (20161103)	Nessus	Scientific Linux Local Security Checks	critical
95321	CentOS 7 : kernel (CESA-2016:2574)	Nessus	CentOS Local Security Checks	critical
94697	Oracle Linux 7 : kernel (ELSA-2016-2574)	Nessus	Oracle Linux Local Security Checks	critical
94537	RHEL 7 : kernel (RHSA-2016:2574)	Nessus	Red Hat Local Security Checks	critical
93607	Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3084-4)	Nessus	Ubuntu Local Security Checks	medium
93606	Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3084-3)	Nessus	Ubuntu Local Security Checks	medium
93605	Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3084-2)	Nessus	Ubuntu Local Security Checks	medium
93604	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3084-1)	Nessus	Ubuntu Local Security Checks	medium
92973	Fedora 24 : kernel (2016-90f142aa64)	Nessus	Fedora Local Security Checks	medium
92971	Fedora 23 : kernel (2016-4b67f775fe)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2016-5412

medium

Tenable Plugins

medium

critical

medium

medium

high

critical

critical

critical

critical

medium

medium

medium

medium

medium

medium