In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not accounted to the allocating process's memory cgroup, allowing unprivileged users to trigger unbounded kernel memory consumption and potentially cause system-wide OOM. Mark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory is properly charged to the caller's memcg. This ensures existing cgroup memory limits apply and prevents uncontrolled kernel memory growth without introducing additional policy or per-file limits.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4606 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4606-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     May 29, 2026                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.257-1     CVE ID         : CVE-2024-56584 CVE-2025-39748 CVE-2025-39764 CVE-2025-40219                      CVE-2025-40261 CVE-2025-68206 CVE-2025-71274 CVE-2025-71292                      CVE-2025-71304 CVE-2026-23100 CVE-2026-23112 CVE-2026-23227                      CVE-2026-23242 CVE-2026-23243 CVE-2026-23245 CVE-2026-23253                      CVE-2026-23273 CVE-2026-23274 CVE-2026-23277 CVE-2026-23279                      CVE-2026-23281 CVE-2026-23286 CVE-2026-23289 CVE-2026-23290                      CVE-2026-23291 CVE-2026-23293 CVE-2026-23298 CVE-2026-23300                      CVE-2026-23303 CVE-2026-23304 CVE-2026-23307 CVE-2026-23312                      CVE-2026-23318 CVE-2026-23336 CVE-2026-23339 CVE-2026-23351                      CVE-2026-23352 CVE-2026-23356 CVE-2026-23357 CVE-2026-23362                      CVE-2026-23365 CVE-2026-23367 CVE-2026-23368 CVE-2026-23372                      CVE-2026-23379 CVE-2026-23381 CVE-2026-23382 CVE-2026-23388                      CVE-2026-23391 CVE-2026-23395 CVE-2026-23396 CVE-2026-23397                      CVE-2026-23398 CVE-2026-23420 CVE-2026-23434 CVE-2026-23439                      CVE-2026-23446 CVE-2026-23452 CVE-2026-23455 CVE-2026-23456                      CVE-2026-23457 CVE-2026-23458 CVE-2026-23460 CVE-2026-23462                      CVE-2026-23463 CVE-2026-23474 CVE-2026-31391 CVE-2026-31393                      CVE-2026-31396 CVE-2026-31399 CVE-2026-31400 CVE-2026-31402                      CVE-2026-31403 CVE-2026-31405 CVE-2026-31411 CVE-2026-31415                      CVE-2026-31416 CVE-2026-31417 CVE-2026-31418 CVE-2026-31421                      CVE-2026-31422 CVE-2026-31423 CVE-2026-31424 CVE-2026-31425                      CVE-2026-31427 CVE-2026-31428 CVE-2026-31447 CVE-2026-31450                      CVE-2026-31452 CVE-2026-31454 CVE-2026-31455 CVE-2026-31466                      CVE-2026-31469 CVE-2026-31473 CVE-2026-31485 CVE-2026-31494                      CVE-2026-31495 CVE-2026-31497 CVE-2026-31498 CVE-2026-31504                      CVE-2026-31507 CVE-2026-31508 CVE-2026-31509 CVE-2026-31510                      CVE-2026-31512 CVE-2026-31515 CVE-2026-31518 CVE-2026-31523                      CVE-2026-31524 CVE-2026-31545 CVE-2026-31546 CVE-2026-31550                      CVE-2026-31552 CVE-2026-31555 CVE-2026-31570 CVE-2026-31628                      CVE-2026-31649 CVE-2026-31651 CVE-2026-31658 CVE-2026-31659                      CVE-2026-31660 CVE-2026-31661 CVE-2026-31662 CVE-2026-31665                      CVE-2026-31667 CVE-2026-31668 CVE-2026-31670 CVE-2026-31671                      CVE-2026-31672 CVE-2026-31674 CVE-2026-31679 CVE-2026-31680                      CVE-2026-31682 CVE-2026-31683 CVE-2026-31720 CVE-2026-31721                      CVE-2026-31726 CVE-2026-31728 CVE-2026-31737 CVE-2026-31738                      CVE-2026-31747 CVE-2026-31748 CVE-2026-31749 CVE-2026-31751                      CVE-2026-31752 CVE-2026-31758 CVE-2026-31759 CVE-2026-31761                      CVE-2026-31762 CVE-2026-31763 CVE-2026-31770 CVE-2026-31773                      CVE-2026-31778 CVE-2026-31780 CVE-2026-31781 CVE-2026-31786                      CVE-2026-31787 CVE-2026-31788 CVE-2026-43011 CVE-2026-43014                      CVE-2026-43015 CVE-2026-43020 CVE-2026-43024 CVE-2026-43026                      CVE-2026-43027 CVE-2026-43028 CVE-2026-43030 CVE-2026-43032                      CVE-2026-43035 CVE-2026-43037 CVE-2026-43038 CVE-2026-43040                      CVE-2026-43041 CVE-2026-43043 CVE-2026-43047 CVE-2026-43050                      CVE-2026-43051 CVE-2026-43060 CVE-2026-43061 CVE-2026-43062                      CVE-2026-43066 CVE-2026-43068 CVE-2026-43069 CVE-2026-43077                      CVE-2026-43078 CVE-2026-43124 CVE-2026-43130 CVE-2026-43132                      CVE-2026-43134 CVE-2026-43135 CVE-2026-43136 CVE-2026-43139                      CVE-2026-43140 CVE-2026-43141 CVE-2026-43147 CVE-2026-43149                      CVE-2026-43152 CVE-2026-43156 CVE-2026-43158 CVE-2026-43159                      CVE-2026-43163 CVE-2026-43168 CVE-2026-43171 CVE-2026-43180                      CVE-2026-43183 CVE-2026-43184 CVE-2026-43187 CVE-2026-43190                      CVE-2026-43194 CVE-2026-43196 CVE-2026-43202 CVE-2026-43203                      CVE-2026-43206 CVE-2026-43207 CVE-2026-43209 CVE-2026-43211                      CVE-2026-43218 CVE-2026-43223 CVE-2026-43226 CVE-2026-43227                      CVE-2026-43230 CVE-2026-43231 CVE-2026-43232 CVE-2026-43233                      CVE-2026-43236 CVE-2026-43241 CVE-2026-43242 CVE-2026-43246                      CVE-2026-43251 CVE-2026-43255 CVE-2026-43257 CVE-2026-43261                      CVE-2026-43264 CVE-2026-43266 CVE-2026-43268 CVE-2026-43269                      CVE-2026-43270 CVE-2026-43273 CVE-2026-43277 CVE-2026-43283                      CVE-2026-43287 CVE-2026-43289 CVE-2026-43295 CVE-2026-43296                      CVE-2026-43314 CVE-2026-43316 CVE-2026-43327 CVE-2026-43328                      CVE-2026-43334 CVE-2026-43336 CVE-2026-43339 CVE-2026-43340                      CVE-2026-43342 CVE-2026-43343 CVE-2026-43355 CVE-2026-43357                      CVE-2026-43363 CVE-2026-43370 CVE-2026-43373 CVE-2026-43381                      CVE-2026-43382 CVE-2026-43383 CVE-2026-43386 CVE-2026-43387                      CVE-2026-43407 CVE-2026-43411 CVE-2026-43420 CVE-2026-43424                      CVE-2026-43425 CVE-2026-43426 CVE-2026-43427 CVE-2026-43428                      CVE-2026-43429 CVE-2026-43430 CVE-2026-43432 CVE-2026-43437                      CVE-2026-43439 CVE-2026-43445 CVE-2026-43449 CVE-2026-43450                      CVE-2026-43451 CVE-2026-43452 CVE-2026-43453 CVE-2026-43458                      CVE-2026-43459 CVE-2026-43466 CVE-2026-43472 CVE-2026-43475                      CVE-2026-43480 CVE-2026-43503 CVE-2026-45848 CVE-2026-45852                      CVE-2026-45856 CVE-2026-45857 CVE-2026-45860 CVE-2026-45862                      CVE-2026-45866 CVE-2026-45867 CVE-2026-45868 CVE-2026-45869                      CVE-2026-45870 CVE-2026-45871 CVE-2026-45873 CVE-2026-45875                      CVE-2026-45879 CVE-2026-45883 CVE-2026-45885 CVE-2026-45890                      CVE-2026-45899 CVE-2026-45904 CVE-2026-45912 CVE-2026-45914                      CVE-2026-45915 CVE-2026-45916 CVE-2026-45919 CVE-2026-45920                      CVE-2026-45923 CVE-2026-45936 CVE-2026-45941 CVE-2026-45948                      CVE-2026-45954 CVE-2026-45956 CVE-2026-45958 CVE-2026-45960                      CVE-2026-45964 CVE-2026-45965 CVE-2026-45968 CVE-2026-45970                      CVE-2026-45974 CVE-2026-45978 CVE-2026-45981 CVE-2026-45983                      CVE-2026-45984 CVE-2026-45985 CVE-2026-46028 CVE-2026-46174                      CVE-2026-46300

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.257-1.  This version additionally includes many more bug fixes     from stable updates 5.10.252-5.10.257.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1702 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    audit: add fchmodat2() to change attributes class (CVE-2025-71239)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/buffer: add alert in try_to_free_buffers() for folios without buffers (CVE-2025-71295)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/tests: shmem: Hold reservation lock around madvise (CVE-2025-71298)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/tests: shmem: Hold reservation lock around vmap/vunmap (CVE-2025-71301)

    In the Linux kernel, the following vulnerability has been resolved:

    espintcp: Fix race condition in espintcp_close() (CVE-2026-23239)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: Fix race condition in tls_sw_cancel_work_tx() (CVE-2026-23240)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: add missing syscalls to read class (CVE-2026-23241)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: check for deleted cursors when revalidating two btrees (CVE-2026-23249)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: some missing initializations on replay (CVE-2026-31693)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/zcrx: fix user_ref race between scrub and refill paths (CVE-2026-43121)

    In the Linux kernel, the following vulnerability has been resolved:

    fbcon: check return value of con2fb_acquire_newinfo() (CVE-2026-43123)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore: ram_core: fix incorrect success return when vmap() fails (CVE-2026-43124)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: fix circular locking dependency in run_unpack_ex (CVE-2026-43127)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)

    In the Linux kernel, the following vulnerability has been resolved:

    ima: verify the previous kernel's IMA buffer lies in addressable RAM (CVE-2026-43129)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (CVE-2026-43130)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-verity: correctly handle dm_bufio_client_create() failure (CVE-2026-43132)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (CVE-2026-43139)

    In the Linux kernel, the following vulnerability has been resolved:

    mfd: core: Add locking around 'mfd_of_node_list' (CVE-2026-43143)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (CVE-2026-43147)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/arm-cmn: Reject unsupported hardware configurations (CVE-2026-43150)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: hid-pl: handle probe errors (CVE-2026-43152)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: remove xfs_attr_leaf_hasname (CVE-2026-43153)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix incorrect early exits in volume label handling (CVE-2026-43154)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    In the Linux kernel, the following vulnerability has been resolved:

    md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    In the Linux kernel, the following vulnerability has been resolved:

    udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). (CVE-2026-43164)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix interlaced plain identification for encoded extents (CVE-2026-43166)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: always flush state and policy upon NETDEV_UNREGISTER event (CVE-2026-43167)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/buddy: Prevent BUG_ON by validating rounded allocation (CVE-2026-43169)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't dump the entire memory region (CVE-2026-43171)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix incorrect early exits for invalid metabox-enabled images (CVE-2026-43179)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: delete attr leaf freemap entries when empty (CVE-2026-43187)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: do not propagate page array emplacement errors as batch errors (CVE-2026-43188)

    In the Linux kernel, the following vulnerability has been resolved:

    media: v4l2-async: Fix error handling on steps after finding a match (CVE-2026-43189)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    In the Linux kernel, the following vulnerability has been resolved:

    net: consume xmit errors of GSO frames (CVE-2026-43194)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Fix scheduling while atomic in IPsec MAC address query (CVE-2026-43199)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ARM processor Error: don't go past allocated memory (CVE-2026-43201)

    In the Linux kernel, the following vulnerability has been resolved:

    net: do not pass flow_id to set_rps_cpu() (CVE-2026-43208)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: ring-buffer: Fix to check event length before using (CVE-2026-43210)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix pci_slot_trylock() error handling (CVE-2026-43211)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (CVE-2026-43214)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix locking usage for tcon fields (CVE-2026-43215)

    In the Linux kernel, the following vulnerability has been resolved:

    net: Drop the lock in skb_may_tx_timestamp() (CVE-2026-43216)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/zcrx: fix sgtable leak on mapping failures (CVE-2026-43224)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: No shortcut out of RDS_CONN_ERROR (CVE-2026-43226)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Clear reconnect pending bit (CVE-2026-43230)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

    In the Linux kernel, the following vulnerability has been resolved:

    team: avoid NETDEV_CHANGEMTU event when unregistering slave (CVE-2026-43234)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (CVE-2026-43238)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: prevent races in ->query_interfaces() (CVE-2026-43239)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/kexec: add a sanity check on previous kernel's ima kexec buffer (CVE-2026-43240)

    In the Linux kernel, the following vulnerability has been resolved:

    kcm: fix zero-frag skb in frag_list on partial sendmsg error (CVE-2026-43244)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs: ->d_compare() must not block (CVE-2026-43245)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: in-kernel: always set ID as avail when rm endp (CVE-2026-43252)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: move wait_on_sem() out of spinlock (CVE-2026-43253)

    In the Linux kernel, the following vulnerability has been resolved:

    ovpn: tcp - fix packet extraction from stream (CVE-2026-43254)

    In the Linux kernel, the following vulnerability has been resolved:

    alpha: fix user-space corruption during memory compaction (CVE-2026-43258)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: Add support for TSV110 Spectre-BHB mitigation (CVE-2026-43261)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't go past the ARM processor CPER record buffer (CVE-2026-43266)

    In the Linux kernel, the following vulnerability has been resolved:

    ring-buffer: Fix possible dereference of uninitialized pointer (CVE-2026-43272)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: supply snapshot context in ceph_zero_partial_object() (CVE-2026-43273)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ensure that won't go past CPER allocated record (CVE-2026-43277)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: clear cloned request bio pointer when last clone bio completes (CVE-2026-43278)

    In the Linux kernel, the following vulnerability has been resolved:

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (CVE-2026-43281)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/slab: do not access current->mems_allowed_seq if !allow_spin (CVE-2026-43285)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: restore failed global reservations to subpool (CVE-2026-43286)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Account property blob allocations to memcg (CVE-2026-43287)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: move ext4_percpu_param_init() before ext4_mb_init() (CVE-2026-43288)

    In the Linux kernel, the following vulnerability has been resolved:

    kexec: derive purgatory entry from symbol (CVE-2026-43289)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node (CVE-2026-43292)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: define and enforce CEPH_MAX_KEY_LEN (CVE-2026-43304)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: crypto: Use the correct destructor kfunc type (CVE-2026-43306)

    In the Linux kernel, the following vulnerability has been resolved:

    md raid: fix hang when stopping arrays with metadata through dm-raid (CVE-2026-43309)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (CVE-2026-43313)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: remove fake timeout to avoid leak request (CVE-2026-43314)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (CVE-2026-43315)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate     arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not     accounted to the allocating process's memory cgroup, allowing unprivileged users to trigger unbounded     kernel memory consumption and potentially cause system-wide OOM. Mark the property blob data allocation     with GFP_KERNEL_ACCOUNT so that the memory is properly charged to the caller's memcg. This ensures     existing cgroup memory limits apply and prevents uncontrolled kernel memory growth without introducing     additional policy or per-file limits. (CVE-2026-43287)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of kernel installed on the remote host is prior to 5.15.202-141.223. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-100 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

    In the Linux kernel, the following vulnerability has been resolved:

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path (CVE-2026-23273)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore: ram_core: fix incorrect success return when vmap() fails (CVE-2026-43124)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (CVE-2026-43130)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (CVE-2026-43139)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (CVE-2026-43147)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: hid-pl: handle probe errors (CVE-2026-43152)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    In the Linux kernel, the following vulnerability has been resolved:

    md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't dump the entire memory region (CVE-2026-43171)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: delete attr leaf freemap entries when empty (CVE-2026-43187)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    In the Linux kernel, the following vulnerability has been resolved:

    net: consume xmit errors of GSO frames (CVE-2026-43194)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix pci_slot_trylock() error handling (CVE-2026-43211)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: No shortcut out of RDS_CONN_ERROR (CVE-2026-43226)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Clear reconnect pending bit (CVE-2026-43230)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: Add support for TSV110 Spectre-BHB mitigation (CVE-2026-43261)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't go past the ARM processor CPER record buffer (CVE-2026-43266)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: supply snapshot context in ceph_zero_partial_object() (CVE-2026-43273)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ensure that won't go past CPER allocated record (CVE-2026-43277)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Account property blob allocations to memcg (CVE-2026-43287)

    In the Linux kernel, the following vulnerability has been resolved:

    kexec: derive purgatory entry from symbol (CVE-2026-43289)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: define and enforce CEPH_MAX_KEY_LEN (CVE-2026-43304)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (CVE-2026-43313)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: remove fake timeout to avoid leak request (CVE-2026-43314)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (CVE-2026-43315)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1544 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/buffer: add alert in try_to_free_buffers() for folios without buffers (CVE-2025-71295)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CVE-2026-23231)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umad: Reject negative data_len in ib_umad_write (CVE-2026-23243)

    In the Linux kernel, the following vulnerability has been resolved:

    fbcon: check return value of con2fb_acquire_newinfo() (CVE-2026-43123)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore: ram_core: fix incorrect success return when vmap() fails (CVE-2026-43124)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (CVE-2026-43130)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-verity: correctly handle dm_bufio_client_create() failure (CVE-2026-43132)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (CVE-2026-43139)

    In the Linux kernel, the following vulnerability has been resolved:

    mfd: core: Add locking around 'mfd_of_node_list' (CVE-2026-43143)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (CVE-2026-43147)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/arm-cmn: Reject unsupported hardware configurations (CVE-2026-43150)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: hid-pl: handle probe errors (CVE-2026-43152)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    In the Linux kernel, the following vulnerability has been resolved:

    md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't dump the entire memory region (CVE-2026-43171)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: delete attr leaf freemap entries when empty (CVE-2026-43187)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    In the Linux kernel, the following vulnerability has been resolved:

    net: consume xmit errors of GSO frames (CVE-2026-43194)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix pci_slot_trylock() error handling (CVE-2026-43211)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (CVE-2026-43214)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: No shortcut out of RDS_CONN_ERROR (CVE-2026-43226)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Clear reconnect pending bit (CVE-2026-43230)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (CVE-2026-43238)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/kexec: add a sanity check on previous kernel's ima kexec buffer (CVE-2026-43240)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: Add support for TSV110 Spectre-BHB mitigation (CVE-2026-43261)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't go past the ARM processor CPER record buffer (CVE-2026-43266)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: supply snapshot context in ceph_zero_partial_object() (CVE-2026-43273)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ensure that won't go past CPER allocated record (CVE-2026-43277)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: clear cloned request bio pointer when last clone bio completes (CVE-2026-43278)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Account property blob allocations to memcg (CVE-2026-43287)

    In the Linux kernel, the following vulnerability has been resolved:

    kexec: derive purgatory entry from symbol (CVE-2026-43289)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: define and enforce CEPH_MAX_KEY_LEN (CVE-2026-43304)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (CVE-2026-43313)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: remove fake timeout to avoid leak request (CVE-2026-43314)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (CVE-2026-43315)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1543 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs/xattr: missing fdput() in fremovexattr error path (CVE-2024-14027)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: add fchmodat2() to change attributes class (CVE-2025-71239)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata (CVE-2025-71265)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: check return value of indx_find to avoid infinite loop (CVE-2025-71266)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST (CVE-2025-71267)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/buffer: add alert in try_to_free_buffers() for folios without buffers (CVE-2025-71295)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not strictly require dirty metadata threshold for metadata writepages (CVE-2026-23157)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CVE-2026-23231)

    In the Linux kernel, the following vulnerability has been resolved:

    espintcp: Fix race condition in espintcp_close() (CVE-2026-23239)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: Fix race condition in tls_sw_cancel_work_tx() (CVE-2026-23240)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umad: Reject negative data_len in ib_umad_write (CVE-2026-23243)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix memory allocation in nvme_pr_read_keys() (CVE-2026-23244)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: check for deleted cursors when revalidating two btrees (CVE-2026-23249)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CVE-2026-23270)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (CVE-2026-23271)

    In the Linux kernel, the following vulnerability has been resolved:

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path (CVE-2026-23273)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix null-pointer dereference on local read error (CVE-2026-23285)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: Fix recursive locking in __configfs_open_file() (CVE-2026-23292)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23293)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Fix refcount leak for tagset_refcnt (CVE-2026-23296)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (CVE-2026-23297)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (CVE-2026-23300)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Don't log plaintext credentials in cifs_set_cifscreds (CVE-2026-23303)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (CVE-2026-23304)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded (CVE-2026-23310)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix preempt count leak in napi poll tracepoint (CVE-2026-23313)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv4: fix ARM64 alignment fault in multipath hash seed (CVE-2026-23316)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (CVE-2026-23317)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (CVE-2026-23319)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (CVE-2026-23335)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (CVE-2026-23340)

    In the Linux kernel, the following vulnerability has been resolved:

    xdp: produce a warning when calculated tailroom is negative (CVE-2026-23343)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (CVE-2026-23351)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/efi: defer freeing of boot services memory (CVE-2026-23352)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/fred: Correct speculative safety in fred_extint() (CVE-2026-23354)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: fix LOGIC BUG in drbd_al_begin_io_nonblock() (CVE-2026-23356)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix stack-out-of-bounds write in devmap (CVE-2026-23359)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix admin queue leak on controller reset (CVE-2026-23360)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (CVE-2026-23361)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix locking for bcm_op runtime updates (CVE-2026-23362)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: i801: Revert i2c: i801: replace acpi_lock with I2C bus lock (CVE-2026-23369)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: ets: fix divide by zero in the offload path (CVE-2026-23379)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix WARN_ON in tracing_buffers_mmap_close (CVE-2026-23380)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (CVE-2026-23381)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing (CVE-2026-23383)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check metadata block offset is within range (CVE-2026-23388)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Fix circular locking dependency in rds_tcp_tune (CVE-2026-23419)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: some missing initializations on replay (CVE-2026-31693)

    In the Linux kernel, the following vulnerability has been resolved:

    fbcon: check return value of con2fb_acquire_newinfo() (CVE-2026-43123)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore: ram_core: fix incorrect success return when vmap() fails (CVE-2026-43124)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)

    In the Linux kernel, the following vulnerability has been resolved:

    ima: verify the previous kernel's IMA buffer lies in addressable RAM (CVE-2026-43129)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (CVE-2026-43130)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-verity: correctly handle dm_bufio_client_create() failure (CVE-2026-43132)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (CVE-2026-43139)

    In the Linux kernel, the following vulnerability has been resolved:

    mfd: core: Add locking around 'mfd_of_node_list' (CVE-2026-43143)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (CVE-2026-43147)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/arm-cmn: Reject unsupported hardware configurations (CVE-2026-43150)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: hid-pl: handle probe errors (CVE-2026-43152)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: remove xfs_attr_leaf_hasname (CVE-2026-43153)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (CVE-2026-43161)

    In the Linux kernel, the following vulnerability has been resolved:

    md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: always flush state and policy upon NETDEV_UNREGISTER event (CVE-2026-43167)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/buddy: Prevent BUG_ON by validating rounded allocation (CVE-2026-43169)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't dump the entire memory region (CVE-2026-43171)

    In the Linux kernel, the following vulnerability has been resolved:

    procfs: fix possible double mmput() in do_procmap_query() (CVE-2026-43178)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: delete attr leaf freemap entries when empty (CVE-2026-43187)

    In the Linux kernel, the following vulnerability has been resolved:

    media: v4l2-async: Fix error handling on steps after finding a match (CVE-2026-43189)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    In the Linux kernel, the following vulnerability has been resolved:

    net: consume xmit errors of GSO frames (CVE-2026-43194)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Fix scheduling while atomic in IPsec MAC address query (CVE-2026-43199)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ARM processor Error: don't go past allocated memory (CVE-2026-43201)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: ring-buffer: Fix to check event length before using (CVE-2026-43210)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix pci_slot_trylock() error handling (CVE-2026-43211)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (CVE-2026-43214)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix locking usage for tcon fields (CVE-2026-43215)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: No shortcut out of RDS_CONN_ERROR (CVE-2026-43226)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Clear reconnect pending bit (CVE-2026-43230)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (CVE-2026-43238)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: prevent races in ->query_interfaces() (CVE-2026-43239)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/kexec: add a sanity check on previous kernel's ima kexec buffer (CVE-2026-43240)

    In the Linux kernel, the following vulnerability has been resolved:

    kcm: fix zero-frag skb in frag_list on partial sendmsg error (CVE-2026-43244)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: move wait_on_sem() out of spinlock (CVE-2026-43253)

    In the Linux kernel, the following vulnerability has been resolved:

    alpha: fix user-space corruption during memory compaction (CVE-2026-43258)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: Add support for TSV110 Spectre-BHB mitigation (CVE-2026-43261)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (CVE-2026-43265)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't go past the ARM processor CPER record buffer (CVE-2026-43266)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: supply snapshot context in ceph_zero_partial_object() (CVE-2026-43273)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ensure that won't go past CPER allocated record (CVE-2026-43277)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: clear cloned request bio pointer when last clone bio completes (CVE-2026-43278)

    In the Linux kernel, the following vulnerability has been resolved:

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (CVE-2026-43281)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Account property blob allocations to memcg (CVE-2026-43287)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: move ext4_percpu_param_init() before ext4_mb_init() (CVE-2026-43288)

    In the Linux kernel, the following vulnerability has been resolved:

    kexec: derive purgatory entry from symbol (CVE-2026-43289)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node (CVE-2026-43292)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: define and enforce CEPH_MAX_KEY_LEN (CVE-2026-43304)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: crypto: Use the correct destructor kfunc type (CVE-2026-43306)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (CVE-2026-43313)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: remove fake timeout to avoid leak request (CVE-2026-43314)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (CVE-2026-43315)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.252-250.992. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-115 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: Fix recvmsg() unconditional requeue (CVE-2026-23066)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/umad: Reject negative data_len in ib_umad_write (CVE-2026-23243)

    In the Linux kernel, the following vulnerability has been resolved:

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path (CVE-2026-23273)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore: ram_core: fix incorrect success return when vmap() fails (CVE-2026-43124)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (CVE-2026-43130)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-verity: correctly handle dm_bufio_client_create() failure (CVE-2026-43132)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (CVE-2026-43136)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (CVE-2026-43139)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: magicmouse: Do not crash on missing msc->input (CVE-2026-43140)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (CVE-2026-43147)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: hid-pl: handle probe errors (CVE-2026-43152)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: pegasus: enable basic endpoint checking (CVE-2026-43156)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    In the Linux kernel, the following vulnerability has been resolved:

    md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't dump the entire memory region (CVE-2026-43171)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (CVE-2026-43180)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: delete attr leaf freemap entries when empty (CVE-2026-43187)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    In the Linux kernel, the following vulnerability has been resolved:

    net: consume xmit errors of GSO frames (CVE-2026-43194)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix pci_slot_trylock() error handling (CVE-2026-43211)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: No shortcut out of RDS_CONN_ERROR (CVE-2026-43226)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: Clear reconnect pending bit (CVE-2026-43230)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: Add support for TSV110 Spectre-BHB mitigation (CVE-2026-43261)

    In the Linux kernel, the following vulnerability has been resolved:

    EFI/CPER: don't go past the ARM processor CPER record buffer (CVE-2026-43266)

    In the Linux kernel, the following vulnerability has been resolved:

    hfsplus: pretend special inodes as regular files (CVE-2026-43268)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: supply snapshot context in ceph_zero_partial_object() (CVE-2026-43273)

    In the Linux kernel, the following vulnerability has been resolved:

    APEI/GHES: ensure that won't go past CPER allocated record (CVE-2026-43277)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Account property blob allocations to memcg (CVE-2026-43287)

    In the Linux kernel, the following vulnerability has been resolved:

    kexec: derive purgatory entry from symbol (CVE-2026-43289)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: remove fake timeout to avoid leak request (CVE-2026-43314)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
318288	Debian dla-4606 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	critical
315658	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1702)	Nessus	Amazon Linux Local Security Checks	high
313374	Linux Distros Unpatched Vulnerability : CVE-2026-43287	Nessus	Misc.	medium
311145	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-100 (ALASKERNEL-5.15-2026-100)	Nessus	Amazon Linux Local Security Checks	medium
305232	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1544)	Nessus	Amazon Linux Local Security Checks	high
305231	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1543)	Nessus	Amazon Linux Local Security Checks	high
304608	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-115 (ALASKERNEL-5.10-2026-115)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2026-43287

medium

Tenable Plugins

critical

high

medium

medium

high

high

medium