In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when the object is freed.

ubuntu_linux USN-8665-1: Ubuntu 24.04 LTS / Ubuntu Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8665-1)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

    e1000/e1000e: Fix leak in DMA error cleanup(CVE-2026-43445)

    futex: Clear stale exiting pointer in futex_lock_pi() retry path(CVE-2026-31555)

    kexec: derive purgatory entry from symbol(CVE-2026-43289)

    nvme-pci: Fix race bug in nvme_poll_irqdisable()(CVE-2026-43448)

    ext4: avoid infinite loops caused by residual data(CVE-2026-31448)

    mm/userfaultfd: fix hugetlb fault mutex hash calculation(CVE-2026-31575)

    netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()(CVE-2026-31674)

    net: skbuff: propagate shared-frag marker through frag-transfer helpers(CVE-2026-43503)

    crypto: af-alg - fix NULL pointer dereference in scatterwalk(CVE-2026-43043)

    net: bonding: fix NULL deref in bond_debug_rlb_hash_show(CVE-2026-31546)

    drm/ioc32: stop speculation on the drm_compat_ioctl path(CVE-2026-31781)

    ext4: always drain queued discard work in ext4_mb_release()(CVE-2026-43065)

    netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()(CVE-2026-23458)

    x86/platform/uv: Handle deconfigured sockets(CVE-2026-31542)

    USB: core: Limit the length of unkillable synchronous timeouts(CVE-2026-43428)

    cifs: some missing initializations on replay(CVE-2026-31693)

    serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN(CVE-2026-23472)

    EDAC/mc: Fix error path ordering in edac_mc_alloc()(CVE-2026-31689)

    module: Fix kernel panic when a symbol st_shndx is out of bounds(CVE-2026-31521)

    can: gw: fix OOB heap access in cgw_csum_crc8_rel()(CVE-2026-31570)

    ext4: publish jinode after initialization(CVE-2026-31450)

    netfilter: xt_multiport: validate range encoding in checkentry(CVE-2026-31681)

    usb: xhci: Prevent interrupt storm on host controller error (HCE)(CVE-2026-43488)

    netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()(CVE-2026-23457)

    ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio(CVE-2026-31451)

    crypto: caam - fix DMA corruption on long hmac keys(CVE-2026-43044)

    scsi: qla2xxx: Completely fix fcport double free(CVE-2026-43414)

    ext4: reject mount if bigalloc with s_first_data_block != 0(CVE-2026-31447)

    net: ipv6: flowlabel: defer exclusive option free until RCU teardown(CVE-2026-31680)

    spi: use generic driver_override infrastructure(CVE-2026-31487)

    HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure(CVE-2026-43049)

    dmaengine: idxd: Fix not releasing workqueue on .release()(CVE-2026-43064)

    usb: gadget: f_ecm: Fix net_device lifecycle with device_move(CVE-2026-31725)

    crypto: atmel-sha204a - Fix OOM -gt;tfm_count leak(CVE-2026-31391)

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()(CVE-2026-23455)

    scsi: hisi_sas: Fix NULL pointer exception during user_scan()(CVE-2026-43413)

    x86/apic: Disable x2apic on resume if the kernel expects so(CVE-2026-43363)

    netfilter: nf_conntrack_expect: use expect-gt;helper(CVE-2026-31414)

    nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set(CVE-2026-43449)

    HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

    mfd: core: Add locking around #39;mfd_of_node_list#39;(CVE-2026-43143)

    scsi: target: tcm_loop: Drain commands in target_reset handler(CVE-2026-43054)

    ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()(CVE-2026-43313)

    netfilter: nft_ct: fix use-after-free in timeout object destroy(CVE-2026-31665)

    lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()(CVE-2026-43492)

    xfrm: clear trailing padding in build_polexpire()(CVE-2026-31664)

    perf/x86/intel/uncore: Skip discovery table for offline dies(CVE-2026-43079)

    usb: dwc3: gadget: Move vbus draw to workqueue context(CVE-2026-43170)

    net: fix fanout UAF in packet_release() via NETDEV_UP race(CVE-2026-31504)

    usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop(CVE-2026-31728)

    netfilter: ip6t_eui64: reject invalid MAC header for all packets(CVE-2026-31685)

    perf/x86/intel/uncore: Fix die ID init and look up bugs(CVE-2026-43344)

    udp: Fix wildcard bind conflict check when using hash2(CVE-2026-31503)

    net/sched: sch_netem: fix out-of-bounds access in packet corruption(CVE-2026-31675)

    ext4: validate p_idx bounds in ext4_ext_correct_indexes(CVE-2026-31449)

    xfrm: prevent policy_hthresh.work from racing with netns teardown(CVE-2026-31516)

    f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()(CVE-2026-31702)

    KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()(CVE-2026-43265)

    ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()(CVE-2026-43068)

    cifs: Fix locking usage for tcon fields(CVE-2026-43215)

    dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()(CVE-2026-31436)

    fbcon: check return value of con2fb_acquire_newinfo()(CVE-2026-43123)

    xfs: close crash window in attr dabtree inactivation(CVE-2026-43053)

    HID: alps: fix NULL pointer dereference in alps_raw_event()(CVE-2026-31625)

    netfilter: nf_conntrack_expect: skip expectations in other netns via proc(CVE-2026-31496)

    xfs: save ailp before dropping the AIL lock in push callbacks(CVE-2026-31454)

    KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm-gt;lock(CVE-2026-31592)

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION(CVE-2026-31590)

    net: ethernet: xscale: Check for PTP support properly(CVE-2026-43173)

    HID: magicmouse: Do not crash on missing msc-gt;input(CVE-2026-43140)

    smb: client: fix OOB reads parsing symlink error response(CVE-2026-31613)

    net/sched: cls_flow: fix NULL pointer dereference on shared blocks(CVE-2026-31422)

    xfrm: hold dev ref until after transport_finish NF_HOOK(CVE-2026-31663)

    bpf: Fix regsafe() for pointers to packet(CVE-2026-43030)

    xfs: avoid dereferencing log items after push callbacks(CVE-2026-31453)

    smb: client: prevent races in -gt;query_interfaces()(CVE-2026-43239)

    kprobes: avoid crash when rmmod/insmod after ftrace killed(CVE-2026-43409)

    xfs: fix undersized l_iclog_roundoff values(CVE-2026-43365)

    ixgbevf: add missing negotiate_features op to Hyper-V ops table(CVE-2026-43094)

    arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults(CVE-2026-43486)

    arm64: Add support for TSV110 Spectre-BHB mitigation(CVE-2026-43261)

    KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()(CVE-2026-43214)

    can: raw: fix ro-gt;uniq use-after-free in raw_rcv()(CVE-2026-31532)

    ptrace: slightly saner #39;get_dumpable()#39; logic(CVE-2026-46333)

    openvswitch: validate MPLS set/set_masked payload length(CVE-2026-31679)

    smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path(CVE-2026-31708)

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock(CVE-2026-31673)

    esp: fix skb leak with espintcp and async crypto(CVE-2026-31518)

    smb: client: fix off-by-8 bounds check in check_wsl_eas()(CVE-2026-31614)

    af_key: validate families in pfkey_send_migrate()(CVE-2026-31515)

    USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts(CVE-2026-43429)

    bpf: Fix incorrect pruning due to atomic fetch precision tracking(CVE-2026-43009)

    xfs: stop reclaim before pushing AIL during unmount(CVE-2026-31455)

    netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP(CVE-2026-31424)

    ext4: convert inline data to extents when truncate exceeds inline size(CVE-2026-31452)

    HID: multitouch: Check to ensure report responses match the request(CVE-2026-43047)

    HID: core: clamp report_size in s32ton() to avoid undefined shift(CVE-2026-31624)

    EFI/CPER: don#39;t dump the entire memory region(CVE-2026-43171)

    pstore: ram_core: fix incorrect success return when vmap() fails(CVE-2026-43124)

    xfrm_user: fix info leak in build_report()(CVE-2026-31671)

    KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated(CVE-2026-43483)

    dcache: Limit the minimal number of bucket to two(CVE-2026-43071)

    netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case(CVE-2026-23456)

    dm: clear cloned request bio pointer when last clone bio completes(CVE-2026-43278)

    net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption(CVE-2026-31533)

    netfilter: ipset: drop logically empty buckets in mtype_del(CVE-2026-31418)

    bridge: br_nd_send: linearize skb before parsing ND options(CVE-2026-31682)

    x86/CPU: Fix FPDSS on Zen1(CVE-2026-31628)

    ext4: fix use-after-free in update_super_work when racing with umount(CVE-2026-31446)

    nvmet: move async event work off nvmet-wq(CVE-2026-31557)

    bpf: Reject sleepable kprobe_multi programs at attach time(CVE-2026-43010)

    ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()(CVE-2026-31531)

    hwmon: (pmbus/core) Protect regulator operations with mutex(CVE-2026-31486)

    iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()(CVE-2026-31505)

    bpf: reject direct access to nullable PTR_TO_BUF pointers(CVE-2026-43333)

    netfilter: ctnetlink: use netlink policy range checks(CVE-2026-31495)

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache(CVE-2026-31402)

    virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false(CVE-2026-31469)

    nvme-pci: ensure we#39;re polling a polled queue(CVE-2026-31523)

    nvdimm/bus: Fix potential use after free in asynchronous initialization(CVE-2026-31399)

    net: bonding: fix use-after-free in bond_xmit_broadcast()(CVE-2026-31419)

    mm/damon/sysfs: check contexts-gt;nr before accessing contexts_arr[0](CVE-2026-31458)

    ipv6: avoid overflows in ip6_datagram_send_ctl()(CVE-2026-31415)

    openvswitch: defer tunnel netdev_put to RCU release(CVE-2026-31678)

    mmc: vub300: fix NULL-deref on disconnect(CVE-2026-31651)

    net: openvswitch: Avoid releasing netdev before teardown completes(CVE-2026-31508)

    netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD(CVE-2026-31428)

    perf: Make sure to use pmu_ctx-gt;pmu for groups(CVE-2026-31528)

    netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp(CVE-2026-31427)

    netfilter: nfnetlink_log: account for netlink header size(CVE-2026-31416)

    X.509: Fix out-of-bounds access when parsing extensions(CVE-2026-31430)

    HID: apple: avoid memory leak in apple_report_fixup()(CVE-2026-31520)

    driver core: platform: use generic driver_override infrastructure(CVE-2026-31527)

    crypto: af_alg - limit RX SG extraction by receive buffer budget(CVE-2026-31677)

    HID: magicmouse: avoid memory leak in magicmouse_report_fixup()(CVE-2026-31522)

    bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing(CVE-2026-23383)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

    ext4: reject mount if bigalloc with s_first_data_block != 0(CVE-2026-31447)

    tls: Fix race condition in tls_sw_cancel_work_tx()(CVE-2026-23240)

    apparmor: replace recursive profile removal with iterative approach(CVE-2026-23404)

    ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

    ipv6: avoid overflows in ip6_datagram_send_ctl()(CVE-2026-31415)

    ceph: add a bunch of missing ceph_path_info initializers(CVE-2026-43408)

    netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

    netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()(CVE-2026-23457)

    PM: runtime: Fix a race condition related to device removal(CVE-2026-23452)

    net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()(CVE-2026-31423)

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

    drm/ioc32: stop speculation on the drm_compat_ioctl path(CVE-2026-31781)

    module: Fix kernel panic when a symbol st_shndx is out of bounds(CVE-2026-31521)

    serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN(CVE-2026-23472)

    net/tcp-md5: Fix MAC comparison to be constant-time(CVE-2026-43383)

    ext4: avoid infinite loops caused by residual data(CVE-2026-31448)

    smb: client: Don#39;t log plaintext credentials in cifs_set_cifscreds(CVE-2026-23303)

    dmaengine: idxd: Fix memory leak when a wq is reset(CVE-2026-31441)

    bridge: br_nd_send: linearize skb before parsing ND options(CVE-2026-31682)

    net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit(CVE-2026-23277)

    crypto: af_alg - limit RX SG extraction by receive buffer budget(CVE-2026-31677)

    netfilter: xt_CT: drop pending enqueued packets on template removal(CVE-2026-23391)

    apparmor: validate DFA start states are in bounds in unpack_pdb(CVE-2026-23269)

    net: bonding: fix use-after-free in bond_xmit_broadcast()(CVE-2026-31419)

    NFSD: Hold net reference for the lifetime of /proc/fs     fs/exports fd(CVE-2026-31403)

    ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()(CVE-2026-31531)

    netfilter: ipset: drop logically empty buckets in mtype_del(CVE-2026-31418)

    dcache: Limit the minimal number of bucket to two(CVE-2026-43071)

    HID: multitouch: Check to ensure report responses match the request(CVE-2026-43047)

    smb: client: fix krb5 mount with username option(CVE-2026-31392)

    net: usb: kaweth: validate USB endpoints(CVE-2026-23312)

    net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check(CVE-2026-23448)

    nvmet: move async event work off nvmet-wq(CVE-2026-31557)

    NFSD: Defer sub-object cleanup in export put callbacks(CVE-2026-31404)

    apparmor: fix side-effect bug in match_char() macro usage(CVE-2026-23406)

    nfnetlink_osf: validate individual option lengths in fingerprints(CVE-2026-23397)

    Squashfs: check metadata block offset is within range(CVE-2026-23388)

    net: add xmit recursion limit to tunnel xmit functions(CVE-2026-23276)

    libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()(CVE-2026-43407)

    xfs: fix undersized l_iclog_roundoff values(CVE-2026-43365)

    ixgbevf: add missing negotiate_features op to Hyper-V ops table(CVE-2026-43094)

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions(CVE-2026-23317)

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock(CVE-2026-31673)

    af_key: validate families in pfkey_send_migrate()(CVE-2026-31515)

    smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path(CVE-2026-31708)

    usb: cdns3: gadget: fix NULL pointer dereference in ep_queue(CVE-2026-31755)

    netfilter: nfnetlink_log: account for netlink header size(CVE-2026-31416)

    sunrpc: fix cache_request leak in cache_release(CVE-2026-31400)

    dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()(CVE-2026-31436)

    net: usb: kalmia: validate USB endpoints(CVE-2026-23365)

    ptrace: slightly saner #39;get_dumpable()#39; logic(CVE-2026-46333)

    net: usb: pegasus: validate USB endpoints(CVE-2026-23290)

    bonding: provide a net pointer to __skb_flow_dissect()(CVE-2026-23119)

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION(CVE-2026-31590)

    nvme-fc: release admin tagset if init fails(CVE-2026-23261)

    icmp: fix NULL pointer dereference in icmp_tag_validation()(CVE-2026-23398)

    netfilter: nft_ct: fix use-after-free in timeout object destroy(CVE-2026-31665)

    net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback(CVE-2026-43057)

    netfilter: nf_conntrack_expect: skip expectations in other netns via proc(CVE-2026-31496)

    HID: alps: fix NULL pointer dereference in alps_raw_event()(CVE-2026-31625)

    net: usb: pegasus: enable basic endpoint checking(CVE-2026-43156)

    udp: Fix wildcard bind conflict check when using hash2(CVE-2026-31503)

    net/sched: sch_netem: fix out-of-bounds access in packet corruption(CVE-2026-31675)

    net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check(CVE-2026-23447)

    netfilter: ip6t_eui64: reject invalid MAC header for all packets(CVE-2026-31685)

    net: openvswitch: Avoid releasing netdev before teardown completes(CVE-2026-31508)

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23293)

    netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels(CVE-2026-23274)

    HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

    x86/CPU/AMD: Add RDSEED fix for Zen5(CVE-2025-68313)

    net: ipv6: flowlabel: defer exclusive option free until RCU teardown(CVE-2026-31680)

    mmc: vub300: fix NULL-deref on disconnect(CVE-2026-31651)

    ipv6: add NULL checks for idev in SRv6 paths(CVE-2026-23442)

    openvswitch: defer tunnel netdev_put to RCU release(CVE-2026-31678)

    x86/apic: Disable x2apic on resume if the kernel expects so(CVE-2026-43363)

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()(CVE-2026-23455)

    virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false(CVE-2026-31469)

    netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()(CVE-2026-23458)

    net: consume xmit errors of GSO frames(CVE-2026-43194)

    dmaengine: idxd: Fix not releasing workqueue on .release()(CVE-2026-43064)

    nvdimm/bus: Fix potential use after free in asynchronous initialization(CVE-2026-31399)

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache(CVE-2026-31402)

    ext4: publish jinode after initialization(CVE-2026-31450)

    net/sched: teql: Fix double-free in teql_master_xmit(CVE-2026-23449)

    media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex(CVE-2026-31473)

    ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()(CVE-2026-31426)

    crypto: af-alg - fix NULL pointer dereference in scatterwalk(CVE-2026-43043)

    netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()(CVE-2026-31674)

    sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting(CVE-2026-23371)

    apparmor: fix race on rawdata dereference(CVE-2026-23410)

    apparmor: Fix double free of ns_name in aa_replace_profiles()(CVE-2026-23408)

    e1000/e1000e: Fix leak in DMA error cleanup(CVE-2026-43445)

    futex: Clear stale exiting pointer in futex_lock_pi() retry path(CVE-2026-31555)

    apparmor: fix race between freeing data and fs accessing it(CVE-2026-23411)

    netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case(CVE-2026-23456)

    driver core: platform: use generic driver_override infrastructure(CVE-2026-31527)

    xfs: stop reclaim before pushing AIL during unmount(CVE-2026-31455)

    netfilter: nf_tables: unconditionally bump set-gt;nelems before insertion(CVE-2026-23272)

    ceph: supply snapshot context in ceph_zero_partial_object()(CVE-2026-43273)

    ext4: convert inline data to extents when truncate exceeds inline size(CVE-2026-31452)

    apparmor: fix differential encoding verification(CVE-2026-23409)

    HID: core: clamp report_size in s32ton() to avoid undefined shift(CVE-2026-31624)

    EFI/CPER: don#39;t dump the entire memory region(CVE-2026-43171)

    pstore: ram_core: fix incorrect success return when vmap() fails(CVE-2026-43124)

    USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts(CVE-2026-43429)

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-23340)

    scsi: target: Fix recursive locking in __configfs_open_file()(CVE-2026-23292)

    netfilter: ctnetlink: use netlink policy range checks(CVE-2026-31495)

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase(CVE-2026-23351)

    kprobes: avoid crash when rmmod/insmod after ftrace killed(CVE-2026-43409)

    xfs: avoid dereferencing log items after push callbacks(CVE-2026-31453)

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop(CVE-2026-23300)

    netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43028)

    apparmor: fix: limit the number of levels of policy namespaces(CVE-2026-23405)

    net/sched: cls_fw: fix NULL pointer dereference on shared blocks(CVE-2026-31421)

    openvswitch: validate MPLS set/set_masked payload length(CVE-2026-31679)

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race(CVE-2026-23271)

    bpf: Fix regsafe() for pointers to packet(CVE-2026-43030)

    tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)

    net/sched: cls_flow: fix NULL pointer dereference on shared blocks(CVE-2026-31422)

    KVM: x86: Use scratch field in MMIO fragment to hold small write values(CVE-2026-31588)

    PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

    net: rfkill: prevent unlimited numbers of rfkill events from being created(CVE-2026-31670)

    apparmor: fix unprivileged local user can do privileged policy management(CVE-2026-23268)

    comedi: dt2815: add hardware detection to prevent crash(CVE-2026-31751)

    netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp(CVE-2026-31427)

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()(CVE-2026-23304)

    apparmor: fix missing bounds check on DEFAULT table in verify_dfa()(CVE-2026-23407)

    xfs: save ailp before dropping the AIL lock in push callbacks(CVE-2026-31454)

    ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()(CVE-2026-43068)

    media: dvb-core: fix wrong reinitialization of ringbuffer on reopen(CVE-2026-23253)

    ext4: validate p_idx bounds in ext4_ext_correct_indexes(CVE-2026-31449)

    netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD(CVE-2026-31428)

    xfrm: prevent policy_hthresh.work from racing with netns teardown(CVE-2026-31516)

    media: dvb-net: fix OOB access in ULE extension header tables(CVE-2026-31405)

    perf/x86/intel/uncore: Fix die ID init and look up bugs(CVE-2026-43344)

    crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption(CVE-2026-43033)

    powerpc, perf: Check that current-gt;mm is alive before getting user callchain(CVE-2026-43416)

    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock(CVE-2026-23368)

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23381)

    perf/x86/intel/uncore: Skip discovery table for offline dies(CVE-2026-43079)

    apparmor: fix memory leak in verify_header(CVE-2026-23403)

    nvme-pci: ensure we#39;re polling a polled queue(CVE-2026-31523)

    xfrm: clear trailing padding in build_polexpire()(CVE-2026-31664)

    x86/efi: defer freeing of boot services memory(CVE-2026-23352)

    netfilter: nf_conntrack_expect: use expect-gt;helper(CVE-2026-31414)

    net: add proper RCU protection to /proc     et/ptype(CVE-2026-23255)

    ice: Fix memory leak in ice_set_ringparam()(CVE-2026-23389)

    usb: typec: ucsi: validate connector number in ucsi_notify_common()(CVE-2026-31729)

    ipv6: icmp: clear skb2-gt;cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-43233)

    net: skbuff: propagate shared-frag marker through frag-transfer helpers(CVE-2026-43503)

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()(CVE-2026-43281)

    netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()(CVE-2026-43453)

    xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

    xfs: delete attr leaf freemap entries when empty(CVE-2026-43187)

    netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

    usb: ulpi: fix double free in ulpi_register_interface() error path(CVE-2026-31759)

    net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-     leak(CVE-2026-43040)

    ip6_tunnel: clear skb2-gt;cb[] in ip4ip6_err()(CVE-2026-43037)

    net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-43180)

    usb: usbtmc: Flush anchored URBs in usbtmc_release(CVE-2026-31758)

    netfilter: nft_ct: drop pending enqueued packets on removal(CVE-2026-43060)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the  packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

    ext4: reject mount if bigalloc with s_first_data_block != 0(CVE-2026-31447)

    tls: Fix race condition in tls_sw_cancel_work_tx()(CVE-2026-23240)

    apparmor: replace recursive profile removal with iterative approach(CVE-2026-23404)

    ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

    ipv6: avoid overflows in ip6_datagram_send_ctl()(CVE-2026-31415)

    ceph: add a bunch of missing ceph_path_info initializers(CVE-2026-43408)

    netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

    netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()(CVE-2026-23457)

    PM: runtime: Fix a race condition related to device removal(CVE-2026-23452)

    net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()(CVE-2026-31423)

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

    drm/ioc32: stop speculation on the drm_compat_ioctl path(CVE-2026-31781)

    module: Fix kernel panic when a symbol st_shndx is out of bounds(CVE-2026-31521)

    serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN(CVE-2026-23472)

    net/tcp-md5: Fix MAC comparison to be constant-time(CVE-2026-43383)

    ext4: avoid infinite loops caused by residual data(CVE-2026-31448)

    smb: client: Don#39;t log plaintext credentials in cifs_set_cifscreds(CVE-2026-23303)

    dmaengine: idxd: Fix memory leak when a wq is reset(CVE-2026-31441)

    bridge: br_nd_send: linearize skb before parsing ND options(CVE-2026-31682)

    net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit(CVE-2026-23277)

    crypto: af_alg - limit RX SG extraction by receive buffer budget(CVE-2026-31677)

    netfilter: xt_CT: drop pending enqueued packets on template removal(CVE-2026-23391)

    apparmor: validate DFA start states are in bounds in unpack_pdb(CVE-2026-23269)

    net: bonding: fix use-after-free in bond_xmit_broadcast()(CVE-2026-31419)

    NFSD: Hold net reference for the lifetime of /proc/fs     fs/exports fd(CVE-2026-31403)

    ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()(CVE-2026-31531)

    netfilter: ipset: drop logically empty buckets in mtype_del(CVE-2026-31418)

    dcache: Limit the minimal number of bucket to two(CVE-2026-43071)

    HID: multitouch: Check to ensure report responses match the request(CVE-2026-43047)

    smb: client: fix krb5 mount with username option(CVE-2026-31392)

    net: usb: kaweth: validate USB endpoints(CVE-2026-23312)

    net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check(CVE-2026-23448)

    nvmet: move async event work off nvmet-wq(CVE-2026-31557)

    NFSD: Defer sub-object cleanup in export put callbacks(CVE-2026-31404)

    apparmor: fix side-effect bug in match_char() macro usage(CVE-2026-23406)

    nfnetlink_osf: validate individual option lengths in fingerprints(CVE-2026-23397)

    Squashfs: check metadata block offset is within range(CVE-2026-23388)

    net: add xmit recursion limit to tunnel xmit functions(CVE-2026-23276)

    libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()(CVE-2026-43407)

    xfs: fix undersized l_iclog_roundoff values(CVE-2026-43365)

    ixgbevf: add missing negotiate_features op to Hyper-V ops table(CVE-2026-43094)

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions(CVE-2026-23317)

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock(CVE-2026-31673)

    af_key: validate families in pfkey_send_migrate()(CVE-2026-31515)

    smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path(CVE-2026-31708)

    usb: cdns3: gadget: fix NULL pointer dereference in ep_queue(CVE-2026-31755)

    netfilter: nfnetlink_log: account for netlink header size(CVE-2026-31416)

    sunrpc: fix cache_request leak in cache_release(CVE-2026-31400)

    dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()(CVE-2026-31436)

    net: usb: kalmia: validate USB endpoints(CVE-2026-23365)

    ptrace: slightly saner #39;get_dumpable()#39; logic(CVE-2026-46333)

    net: usb: pegasus: validate USB endpoints(CVE-2026-23290)

    bonding: provide a net pointer to __skb_flow_dissect()(CVE-2026-23119)

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION(CVE-2026-31590)

    nvme-fc: release admin tagset if init fails(CVE-2026-23261)

    icmp: fix NULL pointer dereference in icmp_tag_validation()(CVE-2026-23398)

    netfilter: nft_ct: fix use-after-free in timeout object destroy(CVE-2026-31665)

    net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback(CVE-2026-43057)

    netfilter: nf_conntrack_expect: skip expectations in other netns via proc(CVE-2026-31496)

    HID: alps: fix NULL pointer dereference in alps_raw_event()(CVE-2026-31625)

    net: usb: pegasus: enable basic endpoint checking(CVE-2026-43156)

    udp: Fix wildcard bind conflict check when using hash2(CVE-2026-31503)

    net/sched: sch_netem: fix out-of-bounds access in packet corruption(CVE-2026-31675)

    net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check(CVE-2026-23447)

    netfilter: ip6t_eui64: reject invalid MAC header for all packets(CVE-2026-31685)

    net: openvswitch: Avoid releasing netdev before teardown completes(CVE-2026-31508)

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23293)

    netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels(CVE-2026-23274)

    HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

    x86/CPU/AMD: Add RDSEED fix for Zen5(CVE-2025-68313)

    net: ipv6: flowlabel: defer exclusive option free until RCU teardown(CVE-2026-31680)

    mmc: vub300: fix NULL-deref on disconnect(CVE-2026-31651)

    ipv6: add NULL checks for idev in SRv6 paths(CVE-2026-23442)

    openvswitch: defer tunnel netdev_put to RCU release(CVE-2026-31678)

    x86/apic: Disable x2apic on resume if the kernel expects so(CVE-2026-43363)

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()(CVE-2026-23455)

    virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false(CVE-2026-31469)

    netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()(CVE-2026-23458)

    net: consume xmit errors of GSO frames(CVE-2026-43194)

    dmaengine: idxd: Fix not releasing workqueue on .release()(CVE-2026-43064)

    nvdimm/bus: Fix potential use after free in asynchronous initialization(CVE-2026-31399)

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache(CVE-2026-31402)

    ext4: publish jinode after initialization(CVE-2026-31450)

    net/sched: teql: Fix double-free in teql_master_xmit(CVE-2026-23449)

    media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex(CVE-2026-31473)

    ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()(CVE-2026-31426)

    crypto: af-alg - fix NULL pointer dereference in scatterwalk(CVE-2026-43043)

    netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()(CVE-2026-31674)

    sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting(CVE-2026-23371)

    apparmor: fix race on rawdata dereference(CVE-2026-23410)

    apparmor: Fix double free of ns_name in aa_replace_profiles()(CVE-2026-23408)

    e1000/e1000e: Fix leak in DMA error cleanup(CVE-2026-43445)

    futex: Clear stale exiting pointer in futex_lock_pi() retry path(CVE-2026-31555)

    apparmor: fix race between freeing data and fs accessing it(CVE-2026-23411)

    netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case(CVE-2026-23456)

    driver core: platform: use generic driver_override infrastructure(CVE-2026-31527)

    xfs: stop reclaim before pushing AIL during unmount(CVE-2026-31455)

    netfilter: nf_tables: unconditionally bump set-gt;nelems before insertion(CVE-2026-23272)

    ceph: supply snapshot context in ceph_zero_partial_object()(CVE-2026-43273)

    ext4: convert inline data to extents when truncate exceeds inline size(CVE-2026-31452)

    apparmor: fix differential encoding verification(CVE-2026-23409)

    HID: core: clamp report_size in s32ton() to avoid undefined shift(CVE-2026-31624)

    EFI/CPER: don#39;t dump the entire memory region(CVE-2026-43171)

    pstore: ram_core: fix incorrect success return when vmap() fails(CVE-2026-43124)

    USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts(CVE-2026-43429)

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-23340)

    scsi: target: Fix recursive locking in __configfs_open_file()(CVE-2026-23292)

    netfilter: ctnetlink: use netlink policy range checks(CVE-2026-31495)

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase(CVE-2026-23351)

    kprobes: avoid crash when rmmod/insmod after ftrace killed(CVE-2026-43409)

    xfs: avoid dereferencing log items after push callbacks(CVE-2026-31453)

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop(CVE-2026-23300)

    netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43028)

    apparmor: fix: limit the number of levels of policy namespaces(CVE-2026-23405)

    net/sched: cls_fw: fix NULL pointer dereference on shared blocks(CVE-2026-31421)

    openvswitch: validate MPLS set/set_masked payload length(CVE-2026-31679)

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race(CVE-2026-23271)

    bpf: Fix regsafe() for pointers to packet(CVE-2026-43030)

    tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)

    net/sched: cls_flow: fix NULL pointer dereference on shared blocks(CVE-2026-31422)

    KVM: x86: Use scratch field in MMIO fragment to hold small write values(CVE-2026-31588)

    PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

    net: rfkill: prevent unlimited numbers of rfkill events from being created(CVE-2026-31670)

    apparmor: fix unprivileged local user can do privileged policy management(CVE-2026-23268)

    comedi: dt2815: add hardware detection to prevent crash(CVE-2026-31751)

    netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp(CVE-2026-31427)

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()(CVE-2026-23304)

    apparmor: fix missing bounds check on DEFAULT table in verify_dfa()(CVE-2026-23407)

    xfs: save ailp before dropping the AIL lock in push callbacks(CVE-2026-31454)

    ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()(CVE-2026-43068)

    media: dvb-core: fix wrong reinitialization of ringbuffer on reopen(CVE-2026-23253)

    ext4: validate p_idx bounds in ext4_ext_correct_indexes(CVE-2026-31449)

    netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD(CVE-2026-31428)

    xfrm: prevent policy_hthresh.work from racing with netns teardown(CVE-2026-31516)

    media: dvb-net: fix OOB access in ULE extension header tables(CVE-2026-31405)

    perf/x86/intel/uncore: Fix die ID init and look up bugs(CVE-2026-43344)

    crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption(CVE-2026-43033)

    powerpc, perf: Check that current-gt;mm is alive before getting user callchain(CVE-2026-43416)

    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock(CVE-2026-23368)

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23381)

    perf/x86/intel/uncore: Skip discovery table for offline dies(CVE-2026-43079)

    apparmor: fix memory leak in verify_header(CVE-2026-23403)

    nvme-pci: ensure we#39;re polling a polled queue(CVE-2026-31523)

    xfrm: clear trailing padding in build_polexpire()(CVE-2026-31664)

    x86/efi: defer freeing of boot services memory(CVE-2026-23352)

    netfilter: nf_conntrack_expect: use expect-gt;helper(CVE-2026-31414)

    net: add proper RCU protection to /proc     et/ptype(CVE-2026-23255)

    ice: Fix memory leak in ice_set_ringparam()(CVE-2026-23389)

    usb: typec: ucsi: validate connector number in ucsi_notify_common()(CVE-2026-31729)

    ipv6: icmp: clear skb2-gt;cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-43233)

    net: skbuff: propagate shared-frag marker through frag-transfer helpers(CVE-2026-43503)

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()(CVE-2026-43281)

    netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()(CVE-2026-43453)

    xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

    xfs: delete attr leaf freemap entries when empty(CVE-2026-43187)

    netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

    usb: ulpi: fix double free in ulpi_register_interface() error path(CVE-2026-31759)

    net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-     leak(CVE-2026-43040)

    ip6_tunnel: clear skb2-gt;cb[] in ip4ip6_err()(CVE-2026-43037)

    net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-43180)

    usb: usbtmc: Flush anchored URBs in usbtmc_release(CVE-2026-31758)

    netfilter: nft_ct: drop pending enqueued packets on removal(CVE-2026-43060)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

    ext4: reject mount if bigalloc with s_first_data_block != 0(CVE-2026-31447)

    tls: Fix race condition in tls_sw_cancel_work_tx()(CVE-2026-23240)

    apparmor: replace recursive profile removal with iterative approach(CVE-2026-23404)

    ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

    ipv6: avoid overflows in ip6_datagram_send_ctl()(CVE-2026-31415)

    ceph: add a bunch of missing ceph_path_info initializers(CVE-2026-43408)

    netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

    netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()(CVE-2026-23457)

    PM: runtime: Fix a race condition related to device removal(CVE-2026-23452)

    net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()(CVE-2026-31423)

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

    drm/ioc32: stop speculation on the drm_compat_ioctl path(CVE-2026-31781)

    module: Fix kernel panic when a symbol st_shndx is out of bounds(CVE-2026-31521)

    serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN(CVE-2026-23472)

    net/tcp-md5: Fix MAC comparison to be constant-time(CVE-2026-43383)

    ext4: avoid infinite loops caused by residual data(CVE-2026-31448)

    smb: client: Don#39;t log plaintext credentials in cifs_set_cifscreds(CVE-2026-23303)

    dmaengine: idxd: Fix memory leak when a wq is reset(CVE-2026-31441)

    bridge: br_nd_send: linearize skb before parsing ND options(CVE-2026-31682)

    net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit(CVE-2026-23277)

    crypto: af_alg - limit RX SG extraction by receive buffer budget(CVE-2026-31677)

    netfilter: xt_CT: drop pending enqueued packets on template removal(CVE-2026-23391)

    apparmor: validate DFA start states are in bounds in unpack_pdb(CVE-2026-23269)

    net: bonding: fix use-after-free in bond_xmit_broadcast()(CVE-2026-31419)

    NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd(CVE-2026-31403)

    ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()(CVE-2026-31531)

    netfilter: ipset: drop logically empty buckets in mtype_del(CVE-2026-31418)

    dcache: Limit the minimal number of bucket to two(CVE-2026-43071)

    HID: multitouch: Check to ensure report responses match the request(CVE-2026-43047)

    smb: client: fix krb5 mount with username option(CVE-2026-31392)

    net: usb: kaweth: validate USB endpoints(CVE-2026-23312)

    net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check(CVE-2026-23448)

    nvmet: move async event work off nvmet-wq(CVE-2026-31557)

    NFSD: Defer sub-object cleanup in export put callbacks(CVE-2026-31404)

    apparmor: fix side-effect bug in match_char() macro usage(CVE-2026-23406)

    nfnetlink_osf: validate individual option lengths in fingerprints(CVE-2026-23397)

    Squashfs: check metadata block offset is within range(CVE-2026-23388)

    net: add xmit recursion limit to tunnel xmit functions(CVE-2026-23276)

    libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()(CVE-2026-43407)

    xfs: fix undersized l_iclog_roundoff values(CVE-2026-43365)

    ixgbevf: add missing negotiate_features op to Hyper-V ops table(CVE-2026-43094)

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions(CVE-2026-23317)

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock(CVE-2026-31673)

    af_key: validate families in pfkey_send_migrate()(CVE-2026-31515)

    smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path(CVE-2026-31708)

    usb: cdns3: gadget: fix NULL pointer dereference in ep_queue(CVE-2026-31755)

    netfilter: nfnetlink_log: account for netlink header size(CVE-2026-31416)

    sunrpc: fix cache_request leak in cache_release(CVE-2026-31400)

    dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()(CVE-2026-31436)

    net: usb: kalmia: validate USB endpoints(CVE-2026-23365)

    ptrace: slightly saner #39;get_dumpable()#39; logic(CVE-2026-46333)

    net: usb: pegasus: validate USB endpoints(CVE-2026-23290)

    bonding: provide a net pointer to __skb_flow_dissect()(CVE-2026-23119)

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION(CVE-2026-31590)

    nvme-fc: release admin tagset if init fails(CVE-2026-23261)

    icmp: fix NULL pointer dereference in icmp_tag_validation()(CVE-2026-23398)

    netfilter: nft_ct: fix use-after-free in timeout object destroy(CVE-2026-31665)

    net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback(CVE-2026-43057)

    netfilter: nf_conntrack_expect: skip expectations in other netns via proc(CVE-2026-31496)

    HID: alps: fix NULL pointer dereference in alps_raw_event()(CVE-2026-31625)

    net: usb: pegasus: enable basic endpoint checking(CVE-2026-43156)

    udp: Fix wildcard bind conflict check when using hash2(CVE-2026-31503)

    net/sched: sch_netem: fix out-of-bounds access in packet corruption(CVE-2026-31675)

    net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check(CVE-2026-23447)

    netfilter: ip6t_eui64: reject invalid MAC header for all packets(CVE-2026-31685)

    net: openvswitch: Avoid releasing netdev before teardown completes(CVE-2026-31508)

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23293)

    netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels(CVE-2026-23274)

    HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

    x86/CPU/AMD: Add RDSEED fix for Zen5(CVE-2025-68313)

    net: ipv6: flowlabel: defer exclusive option free until RCU teardown(CVE-2026-31680)

    mmc: vub300: fix NULL-deref on disconnect(CVE-2026-31651)

    ipv6: add NULL checks for idev in SRv6 paths(CVE-2026-23442)

    openvswitch: defer tunnel netdev_put to RCU release(CVE-2026-31678)

    x86/apic: Disable x2apic on resume if the kernel expects so(CVE-2026-43363)

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()(CVE-2026-23455)

    virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false(CVE-2026-31469)

    netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()(CVE-2026-23458)

    net: consume xmit errors of GSO frames(CVE-2026-43194)

    dmaengine: idxd: Fix not releasing workqueue on .release()(CVE-2026-43064)

    nvdimm/bus: Fix potential use after free in asynchronous initialization(CVE-2026-31399)

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache(CVE-2026-31402)

    ext4: publish jinode after initialization(CVE-2026-31450)

    net/sched: teql: Fix double-free in teql_master_xmit(CVE-2026-23449)

    media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex(CVE-2026-31473)

    ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()(CVE-2026-31426)

    crypto: af-alg - fix NULL pointer dereference in scatterwalk(CVE-2026-43043)

    netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()(CVE-2026-31674)

    sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting(CVE-2026-23371)

    apparmor: fix race on rawdata dereference(CVE-2026-23410)

    apparmor: Fix double free of ns_name in aa_replace_profiles()(CVE-2026-23408)

    e1000/e1000e: Fix leak in DMA error cleanup(CVE-2026-43445)

    futex: Clear stale exiting pointer in futex_lock_pi() retry path(CVE-2026-31555)

    apparmor: fix race between freeing data and fs accessing it(CVE-2026-23411)

    netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case(CVE-2026-23456)

    driver core: platform: use generic driver_override infrastructure(CVE-2026-31527)

    xfs: stop reclaim before pushing AIL during unmount(CVE-2026-31455)

    netfilter: nf_tables: unconditionally bump set-gt;nelems before insertion(CVE-2026-23272)

    ceph: supply snapshot context in ceph_zero_partial_object()(CVE-2026-43273)

    ext4: convert inline data to extents when truncate exceeds inline size(CVE-2026-31452)

    apparmor: fix differential encoding verification(CVE-2026-23409)

    HID: core: clamp report_size in s32ton() to avoid undefined shift(CVE-2026-31624)

    EFI/CPER: don#39;t dump the entire memory region(CVE-2026-43171)

    pstore: ram_core: fix incorrect success return when vmap() fails(CVE-2026-43124)

    USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts(CVE-2026-43429)

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-23340)

    scsi: target: Fix recursive locking in __configfs_open_file()(CVE-2026-23292)

    netfilter: ctnetlink: use netlink policy range checks(CVE-2026-31495)

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase(CVE-2026-23351)

    kprobes: avoid crash when rmmod/insmod after ftrace killed(CVE-2026-43409)

    xfs: avoid dereferencing log items after push callbacks(CVE-2026-31453)

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop(CVE-2026-23300)

    netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43028)

    apparmor: fix: limit the number of levels of policy namespaces(CVE-2026-23405)

    net/sched: cls_fw: fix NULL pointer dereference on shared blocks(CVE-2026-31421)

    openvswitch: validate MPLS set/set_masked payload length(CVE-2026-31679)

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race(CVE-2026-23271)

    bpf: Fix regsafe() for pointers to packet(CVE-2026-43030)

    tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)

    net/sched: cls_flow: fix NULL pointer dereference on shared blocks(CVE-2026-31422)

    KVM: x86: Use scratch field in MMIO fragment to hold small write values(CVE-2026-31588)

    PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

    net: rfkill: prevent unlimited numbers of rfkill events from being created(CVE-2026-31670)

    apparmor: fix unprivileged local user can do privileged policy management(CVE-2026-23268)

    comedi: dt2815: add hardware detection to prevent crash(CVE-2026-31751)

    netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp(CVE-2026-31427)

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()(CVE-2026-23304)

    apparmor: fix missing bounds check on DEFAULT table in verify_dfa()(CVE-2026-23407)

    xfs: save ailp before dropping the AIL lock in push callbacks(CVE-2026-31454)

    ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()(CVE-2026-43068)

    media: dvb-core: fix wrong reinitialization of ringbuffer on reopen(CVE-2026-23253)

    ext4: validate p_idx bounds in ext4_ext_correct_indexes(CVE-2026-31449)

    netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD(CVE-2026-31428)

    xfrm: prevent policy_hthresh.work from racing with netns teardown(CVE-2026-31516)

    media: dvb-net: fix OOB access in ULE extension header tables(CVE-2026-31405)

    perf/x86/intel/uncore: Fix die ID init and look up bugs(CVE-2026-43344)

    crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption(CVE-2026-43033)

    powerpc, perf: Check that current-gt;mm is alive before getting user callchain(CVE-2026-43416)

    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock(CVE-2026-23368)

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled(CVE-2026-23381)

    perf/x86/intel/uncore: Skip discovery table for offline dies(CVE-2026-43079)

    apparmor: fix memory leak in verify_header(CVE-2026-23403)

    nvme-pci: ensure we#39;re polling a polled queue(CVE-2026-31523)

    xfrm: clear trailing padding in build_polexpire()(CVE-2026-31664)

    x86/efi: defer freeing of boot services memory(CVE-2026-23352)

    netfilter: nf_conntrack_expect: use expect-gt;helper(CVE-2026-31414)

    net: add proper RCU protection to /proc/net/ptype(CVE-2026-23255)

    ice: Fix memory leak in ice_set_ringparam()(CVE-2026-23389)

    usb: typec: ucsi: validate connector number in ucsi_notify_common()(CVE-2026-31729)

    ipv6: icmp: clear skb2-gt;cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-43233)

    net: skbuff: propagate shared-frag marker through frag-transfer helpers(CVE-2026-43503)

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()(CVE-2026-43281)

    netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()(CVE-2026-43453)

    xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

    xfs: delete attr leaf freemap entries when empty(CVE-2026-43187)

    netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

    usb: ulpi: fix double free in ulpi_register_interface() error path(CVE-2026-31759)

    net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-     leak(CVE-2026-43040)

    ip6_tunnel: clear skb2-gt;cb[] in ip4ip6_err()(CVE-2026-43037)

    net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-43180)

    usb: usbtmc: Flush anchored URBs in usbtmc_release(CVE-2026-31758)

    netfilter: nft_ct: drop pending enqueued packets on removal(CVE-2026-43060)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50372 advisory.

    - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)   {CVE-2026-46331}
    - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39668743]     {CVE-2026-46242}
    - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39656679]     {CVE-2026-52943}
    - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548792]     {CVE-2025-10263}
    - openvswitch: vport: fix self-deadlock on release of tunnel ports (Ilya Maximets) {CVE-2026-46165}
    - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Ankit Soni)     {CVE-2026-43220}
    - usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) {CVE-2026-46109}
    - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463671]     {CVE-2026-46243}
    - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug:
    39368826,39441323] {CVE-2026-43503,CVE-2026-46300}
    - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368826]     {CVE-2026-46300}
    - netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452464] {CVE-2026-46101}
    - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [Orabug: 39452457]     {CVE-2026-46099}
    - ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39452739]     {CVE-2026-46048}
    - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [Orabug: 39426003]     {CVE-2026-43501}
    - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai) [Orabug: 39452746]     {CVE-2026-45992}
    - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei) [Orabug: 39205989]     {CVE-2026-31419}
    - crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [Orabug: 39452231]     {CVE-2026-46033}
    - spi: fix resource leaks on device setup failure (Johan Hovold) [Orabug: 39452400] {CVE-2026-46083}
    - net: qrtr: ns: Limit the total number of nodes (Manivannan Sadhasivam) [Orabug: 39452123]     {CVE-2026-46003}
    - net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [Orabug: 39452411]     {CVE-2026-46086}
    - net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452207]     {CVE-2026-46026}
    - net: qrtr: ns: Limit the maximum server registration per node (Manivannan Sadhasivam) [Orabug: 39410851]     {CVE-2026-43491}
    - RDMA/mana_ib: Disable RX steering on RSS QP destroy (Long Li) [Orabug: 39452406] {CVE-2026-46084}
    - media: rc: igorplugusb: heed coherency rules (Oliver Neukum) [Orabug: 39452432] {CVE-2026-46091}
    - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452343]     {CVE-2026-46069}
    - thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [Orabug: 39452186]     {CVE-2026-46021}
    - smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito) [Orabug:
    39300611] {CVE-2026-31709}
    - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (Yang Xiuwei) [Orabug: 39452100]     {CVE-2026-45997}
    - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39425998]     {CVE-2026-43499}
    - ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [Orabug: 39452291]     {CVE-2026-46052}
    - dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [Orabug: 39452196] {CVE-2026-46023}
    - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [Orabug: 39452304]     {CVE-2026-46056}
    - tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [Orabug: 39452159] {CVE-2026-46015}
    - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug:
    39452250] {CVE-2026-46040}
    - md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [Orabug: 39452349]     {CVE-2026-46070}
    - md/raid5: fix soft lockup in retry_aligned_read() (Chia-Ming Chang) [Orabug: 39452287] {CVE-2026-46051}
    - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (Sohei Koyama) [Orabug: 39452269]     {CVE-2026-46046}
    - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access (Deepanshu Kartikey) [Orabug:
    39452442] {CVE-2026-46094}
    - io_uring/poll: fix multishot recv missing EOF on wakeup race (Jens Axboe) {CVE-2026-23473}
    - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Kevin Cheng) [Orabug: 39452372]     {CVE-2026-46076}
    - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [Orabug: 39452394] {CVE-2026-46082}
    - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (Yosry Ahmed) [Orabug: 39452061]     {CVE-2026-45987}
    - xfs: fix a resource leak in xfs_alloc_buftarg() (Haoxiang Li) [Orabug: 39452131] {CVE-2026-46005}
    - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug:
    39452201] {CVE-2026-46024}
    - ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [Orabug: 39452243]     {CVE-2026-46037}
    - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Hkbinbin) [Orabug: 39452259]     {CVE-2026-46043}
    - net: qrtr: ns: Free the node during ctrl_cmd_bye() (Manivannan Sadhasivam) [Orabug: 39452246]     {CVE-2026-46038}
    - rxrpc: Fix rxkad crypto unalignment handling (David Howells) [Orabug: 39452728] {CVE-2026-46085}
    - ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [Orabug: 39452126] {CVE-2026-46004}
    - rbd: fix null-ptr-deref when device_add_disk() fails (Dawei Feng) [Orabug: 39452385] {CVE-2026-46079}
    - md/raid10: fix deadlock with check operation and nowait requests (Josh Hunt) [Orabug: 39452284]     {CVE-2026-46050}
    - jbd2: fix deadlock in jbd2_journal_cancel_revoke() (Zhang Yi) [Orabug: 39452318] {CVE-2026-46061}
    - erofs: fix the out-of-bounds nameoff handling for trailing dirents (Gao Xiang) [Orabug: 39452380]     {CVE-2026-46078}
    - ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Harin Lee) [Orabug: 39452280] {CVE-2026-46049}
    - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (Vasiliy Kovalev) [Orabug: 39452119]     {CVE-2026-46002}
    - net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [Orabug: 39452274]     {CVE-2026-46047}
    - net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [Orabug: 39452468] {CVE-2026-46102}
    - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Ziqing Chen)     [Orabug: 39452416] {CVE-2026-46088}
    - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [Orabug: 39410863] {CVE-2026-43493}
    - wifi: rtw88: check for PCI upstream bridge existence (Fedor Pchelkin) [Orabug: 39452437]     {CVE-2026-46092}
    - zram: do not forget to endio for partial discard requests (Sergey Senozhatsky) [Orabug: 39452420]     {CVE-2026-46089}
    - ocfs2: split transactions in dio completion to avoid credit exhaustion (Heming Zhao) [Orabug: 39452388]     {CVE-2026-46080}
    - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (Jesse Zhang) [Orabug: 39167551]     {CVE-2026-23468}
    - padata: Fix pd UAF once and for all (Herbert Xu) [Orabug: 38335055] {CVE-2025-38584}
    - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [Orabug: 39452133]     {CVE-2026-46006}
    - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (Cassio Gabriel) [Orabug: 39452170]     {CVE-2026-46018}
    - Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305898] {CVE-2026-31786}
    - xen/privcmd: fix double free via VMA splitting (Juergen Gross) [Orabug: 39305908] {CVE-2026-31787}
    - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento) [Orabug:
    39300563] {CVE-2026-31696}
    - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson)     {CVE-2026-31697}
    - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson)     {CVE-2026-31698}
    - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson)     {CVE-2026-31699}
    - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) {CVE-2026-31700}
    - ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [Orabug: 39300586]     {CVE-2026-31701}
    - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito) [Orabug:
    39300607] {CVE-2026-31708}
    - smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito) [Orabug: 39343707]     {CVE-2026-43350}
    - fuse: reject oversized dirents in page cache (Samuel Page) [Orabug: 39300556] {CVE-2026-31694}
    - mm/pagewalk: fix race between concurrent split and refault (Max Boone) [Orabug: 39250782]     {CVE-2026-31456}
    - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Felix Fietkau) [Orabug: 39167472]     {CVE-2026-23444}
    - mm/userfaultfd: fix hugetlb fault mutex hash calculation (Jianhui Zhou) [Orabug: 39273453]     {CVE-2026-31575}
    - ipv6: add NULL checks for idev in SRv6 paths (Heminhong) [Orabug: 39167467] {CVE-2026-23442}
    - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331090] {CVE-2026-43075}
    - ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331097]     {CVE-2026-43076}
    - media: as102: fix to not free memory after the device is registered in as102_usb_probe() (Jeongjun Park)     [Orabug: 39273467] {CVE-2026-31578}
    - bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [Orabug: 39273481] {CVE-2026-31580}
    - ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [Orabug: 39273486] {CVE-2026-31581}
    - media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [Orabug: 39273493]     {CVE-2026-31583}
    - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [Orabug: 39273507]     {CVE-2026-31586}
    - KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug:
    39273521] {CVE-2026-31588}
    - x86-64: rename misleadingly named '__copy_user_nocache()' function (Linus Torvalds) [Orabug: 39323162]     {CVE-2026-43073}
    - kernel: be more careful about dup_mmap() failures and uprobe registering (Liam R. Howlett)     {CVE-2025-21709}
    - gpiolib: fix race condition for gdev->srcu (Pawel Narewski) [Orabug: 38887677] {CVE-2026-22986}
    - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (Sean Christopherson) [Orabug:
    39273529] {CVE-2026-31590}
    - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU (Sean Christopherson)     [Orabug: 39273553] {CVE-2026-31593}
    - ocfs2: handle invalid dinode in ocfs2_group_extend (Zhengyuan Huang) [Orabug: 39273569] {CVE-2026-31596}
    - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [Orabug: 39273578]     {CVE-2026-31597}
    - ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [Orabug: 39273586]     {CVE-2026-31598}
    - dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133] {CVE-2026-43071}
    - ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [Orabug: 39273608] {CVE-2026-31602}
    - wifi: rtw88: fix device leak on probe failure (Johan Hovold) [Orabug: 39273620] {CVE-2026-31604}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4671 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4671-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 05, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.176-1~deb11u1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.176-1~deb11u1.  This version additionally includes many more bug     fixes from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4665 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4665-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 03, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.176-1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.176-1.  This version additionally includes many more bug fixes     from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device     is not released when the object is freed. (CVE-2026-43064)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
339249	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-3216)	Nessus	Huawei Local Security Checks	Local	high
339226	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-3176)	Nessus	Huawei Local Security Checks	Local	high
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
333469	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3126)	Nessus	Huawei Local Security Checks	Local	high
333425	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3071)	Nessus	Huawei Local Security Checks	Local	high
332914	EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2930)	Nessus	Huawei Local Security Checks	Local	high
332913	EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)	Nessus	Huawei Local Security Checks	Local	high
332872	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-3021)	Nessus	Huawei Local Security Checks	Local	high
332791	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2971)	Nessus	Huawei Local Security Checks	Local	high
332448	Photon OS 5.0: Linux PHSA-2026-5.0-92-0830	Nessus	PhotonOS Local Security Checks	Local	high
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	Local	medium
328635	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)	Nessus	Huawei Local Security Checks	Local	high
328619	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2730)	Nessus	Huawei Local Security Checks	Local	high
326222	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-2535)	Nessus	Huawei Local Security Checks	Local	high
326126	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-2595)	Nessus	Huawei Local Security Checks	Local	high
325292	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50372)	Nessus	Oracle Linux Local Security Checks	Local	high
325283	Debian dla-4671 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	Local	high
325059	Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update	Nessus	Debian Local Security Checks	Local	high
312598	Linux Distros Unpatched Vulnerability : CVE-2026-43064	Nessus	Misc.	Local	medium
310100	Photon OS 5.0: Linux PHSA-2026-5.0-0830	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-43064

medium

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

medium

high