In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index. This assumption breaks for shadow paging if the guest page tables are modified between VM entries (similar to commit aad885e77496, "KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE", 2026-03-27). The flow is as follows: - a PDE is installed for a 2MB mapping, and a page in that area is accessed. KVM creates a kvm_mmu_page consisting of 512 4KB pages; the kvm_mmu_page is marked by FNAME(fetch) as direct-mapped because the guest's mapping is a huge page (and thus contiguous). - the PDE mapping is changed from outside the guest. - the guest accesses another page in the same 2MB area. KVM installs a new leaf SPTE and rmap entry; the SPTE uses the "correct" GFN (i.e. based on the new mapping, as changed in the previous step) but that GFN is outside of the [sp->gfn, sp->gfn + 511] range; therefore the rmap entry cannot be found and removed when the kvm_mmu_page is zapped. - the memslot that covers the first 2MB mapping is deleted, and the kvm_mmu_page for the now-invalid GPA is zapped. However, rmap_remove() only looks at the [sp->gfn, sp->gfn + 511] range established in step 1, and fails to find the rmap entry that was recorded by step 3. - any operation that causes an rmap walk for the same page accessed by step 3 then walks a stale rmap and dereferences a freed kvm_mmu_page. This includes dirty logging or MMU notifier invalidations (e.g., from MADV_DONTNEED). The underlying issue is that KVM's walking of shadow PTEs assumes that if a SPTE is present when KVM wants to install a non-leaf SPTE, then the existing kvm_mmu_page must be for the correct gfn. Because the only way for the gfn to be wrong is if KVM messed up and failed to zap a SPTE... which shouldn't happen, but *actually* only happens in response to a guest write. That bug dates back literally forever, as even the first version of KVM assumes that the GFN matches and walks into the "wrong" shadow page. However, that was only an imprecision until 2032a93d66fa ("KVM: MMU: Don't allocate gfns page for direct mmu pages") came along. Fix it by checking for a target gfn mismatch and zapping the existing SPTE. That way the old SP and rmap entries are gone, KVM installs the rmap in the right location, and everyone is happy.

redhat RHSA-2026:39083: RHSA-2026:39083: kernel update (Important)

redhat RHSA-2026:39082: RHSA-2026:39082: kernel-rt update (Important)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36957 advisory.

    - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400]     {CVE-2026-53359}
    - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702]     {CVE-2026-46113}
    - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport     Bot) [RHEL-183004] {CVE-2025-71066}
    - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
    - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36957 advisory.

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2839-1 advisory.

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
    - CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
    - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
    - CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
    - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
    - CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
    - CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache (bsc#1265421).
    - CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
    - CVE-2026-53253: Bluetooth: bnep: reject short frames before parsing (bsc#1269574).
    - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36956 advisory.

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)

    * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36957 advisory.

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)
      * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
      * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36956 advisory.

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)
      * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
      * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
      * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36956 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)

    * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36957 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (CVE-2025-71066)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4671 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4671-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 05, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.176-1~deb11u1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.176-1~deb11u1.  This version additionally includes many more bug     fixes from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4665 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4665-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 03, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.176-1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.176-1.  This version additionally includes many more bug fixes     from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2658-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
    - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
    - CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
    - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
    - CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
    - CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
    - CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
    - CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
    - CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed     (bsc#1263880).
    - CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
    - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
    - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
    - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
    - CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
    - CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).
    - CVE-2026-45886: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).
    - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
    - CVE-2026-45984: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214).
    - CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
    - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267361).
    - CVE-2026-46113: KVM: x86/mmu: Add helper to convert SPTE value to its shadow page (bsc#1266969).
    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
    - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267640).
    - CVE-2026-46123: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621).
    - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267387).
    - CVE-2026-46159: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak     (bsc#1267652).
    - CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267697).
    - CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS (bsc#1265211 bsc#1267651).

    The following non security issues were fixed:

    - arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
    - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
    - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} (bsc#1247954).
    - KVM: x86: Remove 'return void' expression for 'void function' (bsc#1247954).
    - smb: client: correctly handle ErrorContextData as a flexible array (git-fixes).
    - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer (bsc#1247954).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1882 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: mm: fix VA-range sanity check (CVE-2023-53989)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd/pgtbl: Fix possible race while increase page table level (CVE-2025-39961)

    In the Linux kernel, the following vulnerability has been resolved:

    net: add proper RCU protection to /proc/net/ptype (CVE-2026-23255)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: unconditionally bump set->nelems before insertion (CVE-2026-23272)

    In the Linux kernel, the following vulnerability has been resolved:

    nf_tables: nft_dynset: fix possible stateful expression memleak in error path (CVE-2026-23399)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: add missing netlink policy validations (CVE-2026-31407)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bonding: fix use-after-free in bond_xmit_broadcast() (CVE-2026-31419)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: fix cached_dev.sb_bio use-after-free and crash (CVE-2026-31580)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (CVE-2026-31586)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Use scratch field in MMIO fragment to hold small write values (CVE-2026-31588)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (CVE-2026-31590)

    In the Linux kernel, the following vulnerability has been resolved:

    usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock (CVE-2026-31673)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_multiport: validate range encoding in checkentry (CVE-2026-31681)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

    In the Linux kernel, the following vulnerability has been resolved:

    rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (CVE-2026-31700)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (CVE-2026-31708)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: validate rec->used in journal-replay file record check (CVE-2026-31716)

    In the Linux kernel, the following vulnerability has been resolved:

    dcache: Limit the minimal number of bucket to two (CVE-2026-43071)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/x86/intel/uncore: Skip discovery table for offline dies (CVE-2026-43079)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ioam6: fix OOB and missing lock (CVE-2026-43083)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (CVE-2026-43085)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm_user: fix info leak in build_mapping() (CVE-2026-43089)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: tighten UMEM headroom validation to account for tailroom and min frame (CVE-2026-43093)

    In the Linux kernel, the following vulnerability has been resolved:

    ixgbevf: add missing negotiate_features op to Hyper-V ops table (CVE-2026-43094)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (CVE-2026-43117)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: require a full NFS mode SID before reading mode bits (CVE-2026-43350)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (CVE-2026-43496)

    In the Linux kernel, the following vulnerability has been resolved:

    rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: handle zerocopy send cleanup before the message is queued (CVE-2026-43502)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix end-of-list detection in cgroup_storage_get_next_key() (CVE-2026-45838)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (CVE-2026-45839)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: cap upcall PID array size and pre-size vport replies (CVE-2026-45840)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (CVE-2026-45841)

    In the Linux kernel, the following vulnerability has been resolved:

    slip: reject VJ receive packets on instances with no rstate array (CVE-2026-45842)

    In the Linux kernel, the following vulnerability has been resolved:

    slip: bound decode() reads against the compressed packet length (CVE-2026-45843)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (CVE-2026-45987)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (CVE-2026-45997)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: call sk_data_ready() after listener migration (CVE-2026-46015)

    In the Linux kernel, the following vulnerability has been resolved:

    dm mirror: fix integer overflow in create_dirty_log() (CVE-2026-46023)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (CVE-2026-46024)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: authencesn - reject short ahash digests during instance creation (CVE-2026-46033)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: icmp: validate reply type before using icmp_pointers (CVE-2026-46037)

    In the Linux kernel, the following vulnerability has been resolved:

    inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (CVE-2026-46040)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (CVE-2026-46046)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix deadlock with check operation and nowait requests (CVE-2026-46050)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: fix soft lockup in retry_aligned_read() (CVE-2026-46051)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: fix MR cleanup on copy error (CVE-2026-46053)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: fix integer overflow in run_unpack() volume boundary check (CVE-2026-46062)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: validate payload size before accessing journal metadata (CVE-2026-46070)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: add buffer boundary checks to run_unpack() (CVE-2026-46072)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix the out-of-bounds nameoff handling for trailing dirents (CVE-2026-46078)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: fix null-ptr-deref when device_add_disk() fails (CVE-2026-46079)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (CVE-2026-46082)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: reject zero shift in nft_bitwise (CVE-2026-46101)

    In the Linux kernel, the following vulnerability has been resolved:

    net: strparser: fix skb_head leak in strp_abort_strp() (CVE-2026-46102)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-thin: fix metadata refcount underflow (CVE-2026-46107)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_gre: Use cached t->net in ip6erspan_changelink(). (CVE-2026-46120)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate block number from NFS file handle in isofs_export_iget (CVE-2026-46124)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix double free in create_space_info() error path (CVE-2026-46129)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (CVE-2026-46132)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    In the Linux kernel, the following vulnerability has been resolved:

    fanotify: fix false positive on permission events (CVE-2026-46150)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (CVE-2026-46161)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: vport: fix self-deadlock on release of tunnel ports (CVE-2026-46165)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix scheduling with atomic in timestamp sockopt (CVE-2026-46168)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (CVE-2026-46172)

    In the Linux kernel, the following vulnerability has been resolved:

    exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: fix accept queue count leak on transport mismatch (CVE-2026-46214)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: fix buffer size clamping order (CVE-2026-46234)

    In the Linux kernel, the following vulnerability has been resolved:

    eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242)

    In the Linux kernel, the following vulnerability has been resolved:

    io-wq: check that the predecessor is hashed in io_wq_remove_pending() (CVE-2026-46274)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix a buffer overflow in ioctl processing (CVE-2026-46294)

    In the Linux kernel, the following vulnerability has been resolved:

    flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.258-257.1041. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-123 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    IB/mad: Don't call to function that might sleep while in atomic context (CVE-2022-50472)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix crash when I/O abort times out (CVE-2022-50493)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-mq: use quiesced elevator switch when reinitializing queues (CVE-2022-50552)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: fix zswap writeback race condition (CVE-2023-53178)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (CVE-2023-53421)

    In the Linux kernel, the following vulnerability has been resolved:

    page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)

    In the Linux kernel, the following vulnerability has been resolved:

    gfs2: Validate i_depth for exhash directories (CVE-2025-38710)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/sysfs: fix use-after-free in state_show() (CVE-2025-39877)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: unconditionally bump set->nelems before insertion (CVE-2026-23272)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (CVE-2026-23340)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: add missing netlink policy validations (CVE-2026-31407)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bonding: fix use-after-free in bond_xmit_broadcast() (CVE-2026-31419)

    In the Linux kernel, the following vulnerability has been resolved:

    can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map (CVE-2026-31577)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: fix cached_dev.sb_bio use-after-free and crash (CVE-2026-31580)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (CVE-2026-31586)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Use scratch field in MMIO fragment to hold small write values (CVE-2026-31588)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (CVE-2026-31590)

    In the Linux kernel, the following vulnerability has been resolved:

    usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: core: clamp report_size in s32ton() to avoid undefined shift (CVE-2026-31624)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: fix reference count leak in rxrpc_server_keyring() (CVE-2026-31634)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: clear trailing padding in build_polexpire() (CVE-2026-31664)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: read UNIX_DIAG_VFS data under unix_state_lock (CVE-2026-31673)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: only handle RESPONSE during service challenge (CVE-2026-31676)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_multiport: validate range encoding in checkentry (CVE-2026-31681)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

    In the Linux kernel, the following vulnerability has been resolved:

    rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (CVE-2026-31700)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (CVE-2026-43085)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm_user: fix info leak in build_mapping() (CVE-2026-43089)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: tighten UMEM headroom validation to account for tailroom and min frame (CVE-2026-43093)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: roccat: fix use-after-free in roccat_report_event (CVE-2026-43111)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (CVE-2026-43117)

    In the Linux kernel, the following vulnerability has been resolved:

    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (CVE-2026-43281)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (CVE-2026-43496)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: handle zerocopy send cleanup before the message is queued (CVE-2026-43502)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix end-of-list detection in cgroup_storage_get_next_key() (CVE-2026-45838)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: cap upcall PID array size and pre-size vport replies (CVE-2026-45840)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (CVE-2026-45841)

    In the Linux kernel, the following vulnerability has been resolved:

    slip: reject VJ receive packets on instances with no rstate array (CVE-2026-45842)

    In the Linux kernel, the following vulnerability has been resolved:

    slip: bound decode() reads against the compressed packet length (CVE-2026-45843)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: arp_tables: fix IEEE1394 ARP payload parsing (CVE-2026-45844)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (CVE-2026-45987)

    In the Linux kernel, the following vulnerability has been resolved:

    ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (CVE-2026-46002)

    In the Linux kernel, the following vulnerability has been resolved:

    dm mirror: fix integer overflow in create_dirty_log() (CVE-2026-46023)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: authencesn - reject short ahash digests during instance creation (CVE-2026-46033)

    In the Linux kernel, the following vulnerability has been resolved:

    inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (CVE-2026-46040)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (CVE-2026-46046)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: fix soft lockup in retry_aligned_read() (CVE-2026-46051)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: fix MR cleanup on copy error (CVE-2026-46053)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: validate payload size before accessing journal metadata (CVE-2026-46070)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: reject zero shift in nft_bitwise (CVE-2026-46101)

    In the Linux kernel, the following vulnerability has been resolved:

    net: strparser: fix skb_head leak in strp_abort_strp() (CVE-2026-46102)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi:si: Return state to normal if message allocation fails (CVE-2026-46108)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: ulpi: fix memory leak on ulpi_register() error paths (CVE-2026-46109)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_gre: Use cached t->net in ip6erspan_changelink(). (CVE-2026-46120)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate block number from NFS file handle in isofs_export_iget (CVE-2026-46124)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Check event message buffer response for bad data (CVE-2026-46128)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (CVE-2026-46132)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    In the Linux kernel, the following vulnerability has been resolved:

    fanotify: fix false positive on permission events (CVE-2026-46150)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: usblp: fix heap leak in IEEE 1284 device ID via short response (CVE-2026-46151)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (CVE-2026-46161)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (CVE-2026-46167)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (CVE-2026-46172)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Add limits to event and receive message requests (CVE-2026-46177)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (CVE-2026-46178)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: fix accept queue count leak on transport mismatch (CVE-2026-46214)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: fix buffer size clamping order (CVE-2026-46234)

    In the Linux kernel, the following vulnerability has been resolved:

    io-wq: check that the predecessor is hashed in io_wq_remove_pending() (CVE-2026-46274)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix a buffer overflow in ioctl processing (CVE-2026-46294)

    In the Linux kernel, the following vulnerability has been resolved:

    nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (CVE-2026-46304)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ip6t_hbh: reject oversized option lists (CVE-2026-52915)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: stop hash:* range iteration at end (CVE-2026-52921)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: Fix a potential NPD when removing a port from a VRF (CVE-2026-52925)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: handle rbtree insertion error in decode_choose_args() (CVE-2026-52954)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix potential out-of-bounds access in crush_decode() (CVE-2026-52955)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix potential null-ptr-deref in decode_choose_args() (CVE-2026-52957)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix potential out-of-bounds access in osdmap_decode() (CVE-2026-52958)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_ct: fix missing expect put in obj eval (CVE-2026-52970)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (CVE-2026-52982)

    In the Linux kernel, the following vulnerability has been resolved:

    netdevsim: zero initialize struct iphdr in dummy sk_buff (CVE-2026-52985)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (CVE-2026-52998)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (CVE-2026-52999)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xtables: restrict several matches to inet family (CVE-2026-53001)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: remove sprintf usage (CVE-2026-53002)

    In the Linux kernel, the following vulnerability has been resolved:

    pppoe: drop PFC frames (CVE-2026-53003)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)

    In the Linux kernel, the following vulnerability has been resolved:

    nexthop: fix IPv6 route referencing IPv4 nexthop (CVE-2026-53012)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: core: Fix integer overflow in UNMAP bounds check (CVE-2026-53021)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: usbhid: fix deadlock in hid_post_reset() (CVE-2026-53037)

    In the Linux kernel, the following vulnerability has been resolved:

    efi/capsule-loader: fix incorrect sizeof in phys array reallocation (CVE-2026-53047)

    In the Linux kernel, the following vulnerability has been resolved:

    quota: Fix race of dquot_scan_active() with quota deactivation (CVE-2026-53050)

    In the Linux kernel, the following vulnerability has been resolved:

    dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache metadata: fix memory leak on metadata abort retry (CVE-2026-53060)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache: fix dirty mapping checking in passthrough mode switching (CVE-2026-53061)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (CVE-2026-53074)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: Balance RCU calls in drbd_adm_dump_devices() (CVE-2026-53128)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2450-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2025-10263: arm64: Add workaround for Cortex-A76 erratum 1286807 (bsc#1266290).
    - CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
    - CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
    - CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).
    - CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
    - CVE-2026-23279: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (bsc#1260468).
    - CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
    - CVE-2026-23367: wifi: radiotap: reject radiotap with unknown bits (bsc#1260731).
    - CVE-2026-23396: wifi: mac80211: fix NULL deref in mesh_matches_local() (bsc#1260729).
    - CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
    - CVE-2026-23448: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check (bsc#1261750).
    - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
    - CVE-2026-31415: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099).
    - CVE-2026-31421: net/sched: cls_fw: fix NULL pointer dereference on shared blocks (bsc#1262061).
    - CVE-2026-31447: ext4: reject mount if bigalloc with s_first_data_block != 0 (bsc#1262614).
    - CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
    - CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
    - CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false       (bsc#1267816).
    - CVE-2026-31498: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (bsc#1262751).
    - CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
    - CVE-2026-31515: af_key: validate families in pfkey_send_migrate() (bsc#1262752).
    - CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
    - CVE-2026-31532: can: af_can: export can_sock_destruct() (bsc#1262757).
    - CVE-2026-31540: drm/i915/gt: Check set_default_submission() before deferencing (bsc#1263011).
    - CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
    - CVE-2026-31588: KVM: x86: Use scratch field in MMIO fragment to hold small write values (bsc#1263165).
    - CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
    - CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
    - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
    - CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
    - CVE-2026-31668: seg6: separate dst_cache for input and output paths in seg6 lwtunnel (bsc#1263140).
    - CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
    - CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
    - CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
    - CVE-2026-31678: openvswitch: defer tunnel netdev_put to RCU release (bsc#1263562).
    - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
    - CVE-2026-31778: ALSA: caiaq: fix stack out-of-bounds read in init_card (bsc#1263923).
    - CVE-2026-43020: Bluetooth: MGMT: validate LTK enc_size on load (bsc#1264006).
    - CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
    - CVE-2026-43026: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).
    - CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
    - CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
    - CVE-2026-43038: ipv6: icmp: clear skb2->cb in ip6_err_gen_icmpv6_unreach() (bsc#1264097).
    - CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to     prevent an info-       leak (bsc#1264091).
    - CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper (bsc#1263945).
    - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
    - CVE-2026-43140: HID: magicmouse: Do not crash on missing msc->input (bsc#1264630).
    - CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
    - CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
    - CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
    - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
    - CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409).
    - CVE-2026-43338: btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716).
    - CVE-2026-43339: ipv6: prevent possible UaF in addrconf_permanent_addr() (bsc#1264763).
    - CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).
    - CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).
    - CVE-2026-43407: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020).
    - CVE-2026-43413: scsi: hisi_sas: Fix NULL pointer exception during user_scan() (bsc#1264671).
    - CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669).
    - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
    - CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (bsc#1265960).
    - CVE-2026-45835: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (bsc#1266411).
    - CVE-2026-45841: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (bsc#1266390).
    - CVE-2026-45842: slip: reject VJ receive packets on instances with no rstate array (bsc#1266400).
    - CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395).
    - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
    - CVE-2026-45870: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704).
    - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
    - CVE-2026-45983: nfsd: never defer requests during idmap lookup (bsc#1266697).
    - CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
    - CVE-2026-46024: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (bsc#1267218).
    - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
    - CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (bsc#1267531).
    - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
    - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267387).
    - CVE-2026-46157: ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger (bsc#1267726).
    - CVE-2026-46159: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak     (bsc#1267652).
    - CVE-2026-46160: btrfs: fix missing last_unlink_trans update when removing a directory (bsc#1267624).
    - CVE-2026-46169: hfsplus: fix uninit-value by validating catalog record size (bsc#1267713).
    - CVE-2026-46181: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (bsc#1266826).
    - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).
    - CVE-2026-46259: procfs: fix missing RCU protection when reading real_parent in do_task_stat()     (bsc#1267685).
    - CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS (bsc#1267651).

    The following non security issues were fixed:

    - arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
    - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
    - bcache: fix uninitialized closure object (git-fixes).
    - check-for-config-changes: Exclude CC_MS_EXTENSIONS.
    - check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}.
    - kvm/svm: PKU not currently supported (bsc#1263887).
    - KVM: x86: Handle PKU CPUID adjustment in VMX code (bsc#1263887).
    - mkspec: Add signature to source list only when it exists.
    - net/sched: cls_fw: fix NULL dereference of 'old' filters before change() (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2310-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
    - CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
    - CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
    - CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
    - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
    - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
    - CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
    - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
    - CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).
    - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
    - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
    - CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (bsc#1265960).
    - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
    - CVE-2026-45910: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889).
    - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
    - CVE-2026-46004: ALSA: caiaq: Handle probe errors properly (bsc#1267222).
    - CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
    - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
    - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
    - CVE-2026-46114: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1266972).
    - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).

    The following non security issues were fixed:

    - arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
    - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).
    - drm/hyperv: validate resolution_count and fix WIN8 fallback (git-fixes).
    - drm/hyperv: validate VMBus packet size in receive callback (git-fixes).
    - net: gro: don't merge zcopy skbs (git-fixes).
    - net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes).
    - net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414).
    - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928).
    - net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes).
    - net: mana: Skip redundant detach on already-detached port (git-fixes).
    - net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765).
    - net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765).
    - net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402).
    - RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes).
    - s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1263068).
    - s390/entry: Scrub r12 register on kernel entry (bsc#1263068).
    - s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1263068).
    - smb: client: correctly handle ErrorContextData as a flexible array (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2383-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700).
    - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
    - CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).
    - CVE-2026-43037: ip6_tunnel: clear skb2->cb in ip4ip6_err() (bsc#1263995).
    - CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1264551).
    - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001).
    - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266009).
    - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).
    - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267205).
    - CVE-2026-46021: thermal: core: Fix thermal zone governor cleanup issues (bsc#1267220).
    - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (bsc#1266901).
    - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266969).
    - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (bsc#1266238).

    The following non security issues were fixed:

    - arm64: tlb: Allow XZR argument to TLBI ops (git-fixes).
    - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct     shadow pages using sp->gfn plus the SPTE index. This assumption breaks for shadow paging if the guest page     tables are modified between VM entries (similar to commit aad885e77496, KVM: x86/mmu: Drop/zap existing     present SPTE even when creating an MMIO SPTE, 2026-03-27). The flow is as follows: - a PDE is installed     for a 2MB mapping, and a page in that area is accessed. KVM creates a kvm_mmu_page consisting of 512 4KB     pages; the kvm_mmu_page is marked by FNAME(fetch) as direct-mapped because the guest's mapping is a huge     page (and thus contiguous). - the PDE mapping is changed from outside the guest. - the guest accesses     another page in the same 2MB area. KVM installs a new leaf SPTE and rmap entry; the SPTE uses the     correct GFN (i.e. based on the new mapping, as changed in the previous step) but that GFN is outside of     the [sp->gfn, sp->gfn + 511] range; therefore the rmap entry cannot be found and removed when the     kvm_mmu_page is zapped. - the memslot that covers the first 2MB mapping is deleted, and the kvm_mmu_page     for the now-invalid GPA is zapped. However, rmap_remove() only looks at the [sp->gfn, sp->gfn + 511] range     established in step 1, and fails to find the rmap entry that was recorded by step 3. - any operation that     causes an rmap walk for the same page accessed by step 3 then walks a stale rmap and dereferences a freed     kvm_mmu_page. This includes dirty logging or MMU notifier invalidations (e.g., from MADV_DONTNEED). The     underlying issue is that KVM's walking of shadow PTEs assumes that if a SPTE is present when KVM wants to     install a non-leaf SPTE, then the existing kvm_mmu_page must be for the correct gfn. Because the only way     for the gfn to be wrong is if KVM messed up and failed to zap a SPTE... which shouldn't happen, but
    *actually* only happens in response to a guest write. That bug dates back literally forever, as even the     first version of KVM assumes that the GFN matches and walks into the wrong shadow page. However, that     was only an imprecision until 2032a93d66fa (KVM: MMU: Don't allocate gfns page for direct mmu pages)     came along. Fix it by checking for a target gfn mismatch and zapping the existing SPTE. That way the old     SP and rmap entries are gone, KVM installs the rmap in the right location, and everyone is happy.
    (CVE-2026-46113)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1754 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    mm: call ->free_folio() directly in folio_unmap_invalidate() (CVE-2026-31589)

    In the Linux kernel, the following vulnerability has been resolved:

    Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)

    In the Linux kernel, the following vulnerability has been resolved:

    xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

    In the Linux kernel, the following vulnerability has been resolved:

    net: af_key: zero aligned sockaddr tail in PF_KEY exports (CVE-2026-43088)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (CVE-2026-43492)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: reset op_nents when zerocopy page pin fails (CVE-2026-43494)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (CVE-2026-43496)

    In the Linux kernel, the following vulnerability has been resolved:

    rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: handle zerocopy send cleanup before the message is queued (CVE-2026-43502)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix use-after-free in arena_vm_close on fork (CVE-2026-45837)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (CVE-2026-45987)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: Fix re-decryption of RESPONSE packets (CVE-2026-45988)

    In the Linux kernel, the following vulnerability has been resolved:

    of: unittest: fix use-after-free in testdrv_probe() (CVE-2026-45989)

    In the Linux kernel, the following vulnerability has been resolved:

    slub: fix data loss and overflow in krealloc() (CVE-2026-45990)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (CVE-2026-45997)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (CVE-2026-45999)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (CVE-2026-46000)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Add missing save/restore handling of LBR MSRs (CVE-2026-46014)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: call sk_data_ready() after listener migration (CVE-2026-46015)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp (CVE-2026-46020)

    In the Linux kernel, the following vulnerability has been resolved:

    thermal: core: Fix thermal zone governor cleanup issues (CVE-2026-46021)

    In the Linux kernel, the following vulnerability has been resolved:

    dm mirror: fix integer overflow in create_dirty_log() (CVE-2026-46023)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (CVE-2026-46024)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/core: fix damon_call() vs kdamond_fn() exit race (CVE-2026-46025)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/slab: return NULL early from kmalloc_nolock() in NMI on UP (CVE-2026-46029)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: authencesn - reject short ahash digests during instance creation (CVE-2026-46033)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP (CVE-2026-46035)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: icmp: validate reply type before using icmp_pointers (CVE-2026-46037)

    In the Linux kernel, the following vulnerability has been resolved:

    inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (CVE-2026-46040)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() (CVE-2026-46042)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi:ssif: Clean up kthread on errors (CVE-2026-46044)

    In the Linux kernel, the following vulnerability has been resolved:

    md/md-llbitmap: skip reading rdevs that are not in_sync (CVE-2026-46045)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (CVE-2026-46046)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix deadlock with check operation and nowait requests (CVE-2026-46050)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: fix soft lockup in retry_aligned_read() (CVE-2026-46051)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: only d_add() negative dentries when they are unhashed (CVE-2026-46052)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: fix MR cleanup on copy error (CVE-2026-46053)

    In the Linux kernel, the following vulnerability has been resolved:

    landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() (CVE-2026-46057)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN (CVE-2026-46059)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: fix deadlock in jbd2_journal_cancel_revoke() (CVE-2026-46061)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: fix integer overflow in run_unpack() volume boundary check (CVE-2026-46062)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (CVE-2026-46065)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix num_ops off-by-one when crypto allocation fails (CVE-2026-46066)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: validate payload size before accessing journal metadata (CVE-2026-46070)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (CVE-2026-46071)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: add buffer boundary checks to run_unpack() (CVE-2026-46072)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix the out-of-bounds nameoff handling for trailing dirents (CVE-2026-46078)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: fix null-ptr-deref when device_add_disk() fails (CVE-2026-46079)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: acomp - fix wrong pointer stored by acomp_save_req() (CVE-2026-46081)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (CVE-2026-46082)

    In the Linux kernel, the following vulnerability has been resolved:

    spi: fix resource leaks on device setup failure

    Make sure to call controller cleanup() if spi_setup() fails whileregistering a device to avoid leaking any     resources allocated bysetup(). (CVE-2026-46083)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana_ib: Disable RX steering on RSS QP destroy (CVE-2026-46084)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)

    In the Linux kernel, the following vulnerability has been resolved:

    zram: do not forget to endio for partial discard requests (CVE-2026-46089)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access (CVE-2026-46094)

    In the Linux kernel, the following vulnerability has been resolved:

    md/md-llbitmap: raise barrier before state machine transition (CVE-2026-46095)

    In the Linux kernel, the following vulnerability has been resolved:

    tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() (CVE-2026-46096)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: afs: revert mmap_prepare() change (CVE-2026-46100)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: reject zero shift in nft_bitwise (CVE-2026-46101)

    In the Linux kernel, the following vulnerability has been resolved:

    net: strparser: fix skb_head leak in strp_abort_strp() (CVE-2026-46102)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: use sk blob accessor in socket permission helpers (CVE-2026-46104)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpt3sas: Limit NVMe request size to 2 MiB (CVE-2026-46105)

    In the Linux kernel, the following vulnerability has been resolved:

    eventfs: Hold eventfs_mutex and SRCU when remount walks events (CVE-2026-46106)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-thin: fix metadata refcount underflow (CVE-2026-46107)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi:si: Return state to normal if message allocation fails (CVE-2026-46108)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    In the Linux kernel, the following vulnerability has been resolved:

    block: add pgmap check to biovec_phys_mergeable (CVE-2026-46115)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_gre: Use cached t->net in ip6erspan_changelink(). (CVE-2026-46120)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (CVE-2026-46121)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate block number from NFS file handle in isofs_export_iget (CVE-2026-46124)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Check event message buffer response for bad data (CVE-2026-46128)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix double free in create_space_info() error path (CVE-2026-46129)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: check for nEPT/nNPT in slow flush hypercalls (CVE-2026-46131)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (CVE-2026-46132)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: ADD_ADDR rtx: fix potential data-race (CVE-2026-46137)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: use kzalloc to zero-initialize security descriptor buffer (CVE-2026-46139)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (CVE-2026-46144)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (CVE-2026-46147)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    In the Linux kernel, the following vulnerability has been resolved:

    fanotify: fix false positive on permission events (CVE-2026-46150)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (CVE-2026-46158)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix missing last_unlink_trans update when removing a directory (CVE-2026-46160)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (CVE-2026-46161)

    In the Linux kernel, the following vulnerability has been resolved:

    ice: fix double free in ice_sf_eth_activate() error path (CVE-2026-46162)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: vport: fix self-deadlock on release of tunnel ports (CVE-2026-46165)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix scheduling with atomic in timestamp sockopt (CVE-2026-46168)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: ADD_ADDR rtx: free sk if last (CVE-2026-46170)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (CVE-2026-46172)

    In the Linux kernel, the following vulnerability has been resolved:

    exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (CVE-2026-46174)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Add limits to event and receive message requests (CVE-2026-46177)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

    In the Linux kernel, the following vulnerability has been resolved:

    mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() (CVE-2026-46190)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: ah: account for ESN high bits in async callbacks (CVE-2026-46193)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: validate dacloffset before building DACL pointers (CVE-2026-46195)

    In the Linux kernel, the following vulnerability has been resolved:

    tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (CVE-2026-46196)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/alloc_tag: clear codetag for pages allocated before page_ext initialization (CVE-2026-46279)

    In the Linux kernel, the following vulnerability has been resolved:

    vmalloc: fix buffer overflow in vrealloc_node_align() (CVE-2026-46281)

    In the Linux kernel, the following vulnerability has been resolved:

    tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() (CVE-2026-46283)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: fix early boot crash on parameters without '=' separator (CVE-2026-46284)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/scatterlist: fix length calculations in extract_kvec_to_sg (CVE-2026-46289)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/efi: Fix graceful fault handling after FPU softirq changes (CVE-2026-46290)

    In the Linux kernel, the following vulnerability has been resolved:

    pmdomain: core: Fix detach procedure for virtual devices in genpd (CVE-2026-46292)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix a buffer overflow in ioctl processing (CVE-2026-46294)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty (CVE-2026-46295)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303)

    In the Linux kernel, the following vulnerability has been resolved:

    flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

    In the Linux kernel, the following vulnerability has been resolved:

    ptrace: slightly saner 'get_dumpable()' logic (CVE-2026-46333)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/core: disallow non-power of two min_region_sz on damon_start() (CVE-2026-52905)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1753 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    mm/pagewalk: fix race between concurrent split and refault (CVE-2026-31456)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: reject oversized dirents in page cache (CVE-2026-31694)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (CVE-2026-31700)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: validate rec->used in journal-replay file record check (CVE-2026-31716)

    In the Linux kernel, the following vulnerability has been resolved:

    x86: shadow stacks: proper error handling for mmap lock (CVE-2026-43109)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (CVE-2026-43492)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: reset op_nents when zerocopy page pin fails (CVE-2026-43494)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (CVE-2026-43496)

    In the Linux kernel, the following vulnerability has been resolved:

    rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: handle zerocopy send cleanup before the message is queued (CVE-2026-43502)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix use-after-free in arena_vm_close on fork (CVE-2026-45837)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (CVE-2026-45987)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: Fix re-decryption of RESPONSE packets (CVE-2026-45988)

    In the Linux kernel, the following vulnerability has been resolved:

    of: unittest: fix use-after-free in testdrv_probe() (CVE-2026-45989)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (CVE-2026-45997)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (CVE-2026-45999)

    In the Linux kernel, the following vulnerability has been resolved:

    rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (CVE-2026-46000)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: call sk_data_ready() after listener migration (CVE-2026-46015)

    In the Linux kernel, the following vulnerability has been resolved:

    thermal: core: Fix thermal zone governor cleanup issues (CVE-2026-46021)

    In the Linux kernel, the following vulnerability has been resolved:

    dm mirror: fix integer overflow in create_dirty_log() (CVE-2026-46023)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (CVE-2026-46024)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: authencesn - reject short ahash digests during instance creation (CVE-2026-46033)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: icmp: validate reply type before using icmp_pointers (CVE-2026-46037)

    In the Linux kernel, the following vulnerability has been resolved:

    inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (CVE-2026-46040)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (CVE-2026-46046)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix deadlock with check operation and nowait requests (CVE-2026-46050)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: fix soft lockup in retry_aligned_read() (CVE-2026-46051)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: only d_add() negative dentries when they are unhashed (CVE-2026-46052)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: fix MR cleanup on copy error (CVE-2026-46053)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: fix deadlock in jbd2_journal_cancel_revoke() (CVE-2026-46061)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: fix integer overflow in run_unpack() volume boundary check (CVE-2026-46062)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (CVE-2026-46065)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid5: validate payload size before accessing journal metadata (CVE-2026-46070)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: add buffer boundary checks to run_unpack() (CVE-2026-46072)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: fix the out-of-bounds nameoff handling for trailing dirents (CVE-2026-46078)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: fix null-ptr-deref when device_add_disk() fails (CVE-2026-46079)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (CVE-2026-46082)

    In the Linux kernel, the following vulnerability has been resolved:

    spi: fix resource leaks on device setup failure

    Make sure to call controller cleanup() if spi_setup() fails whileregistering a device to avoid leaking any     resources allocated bysetup(). (CVE-2026-46083)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana_ib: Disable RX steering on RSS QP destroy (CVE-2026-46084)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)

    In the Linux kernel, the following vulnerability has been resolved:

    zram: do not forget to endio for partial discard requests (CVE-2026-46089)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access (CVE-2026-46094)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: reject zero shift in nft_bitwise (CVE-2026-46101)

    In the Linux kernel, the following vulnerability has been resolved:

    net: strparser: fix skb_head leak in strp_abort_strp() (CVE-2026-46102)

    In the Linux kernel, the following vulnerability has been resolved:

    eventfs: Hold eventfs_mutex and SRCU when remount walks events (CVE-2026-46106)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-thin: fix metadata refcount underflow (CVE-2026-46107)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi:si: Return state to normal if message allocation fails (CVE-2026-46108)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

    In the Linux kernel, the following vulnerability has been resolved:

    block: add pgmap check to biovec_phys_mergeable (CVE-2026-46115)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_gre: Use cached t->net in ip6erspan_changelink(). (CVE-2026-46120)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock (CVE-2026-46121)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate block number from NFS file handle in isofs_export_iget (CVE-2026-46124)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Check event message buffer response for bad data (CVE-2026-46128)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix double free in create_space_info() error path (CVE-2026-46129)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: check for nEPT/nNPT in slow flush hypercalls (CVE-2026-46131)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (CVE-2026-46132)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: use kzalloc to zero-initialize security descriptor buffer (CVE-2026-46139)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() (CVE-2026-46144)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    In the Linux kernel, the following vulnerability has been resolved:

    fanotify: fix false positive on permission events (CVE-2026-46150)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (CVE-2026-46161)

    In the Linux kernel, the following vulnerability has been resolved:

    ice: fix double free in ice_sf_eth_activate() error path (CVE-2026-46162)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: vport: fix self-deadlock on release of tunnel ports (CVE-2026-46165)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix scheduling with atomic in timestamp sockopt (CVE-2026-46168)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (CVE-2026-46172)

    In the Linux kernel, the following vulnerability has been resolved:

    exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (CVE-2026-46174)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: Add limits to event and receive message requests (CVE-2026-46177)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185)

    In the Linux kernel, the following vulnerability has been resolved:

    mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() (CVE-2026-46190)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: ah: account for ESN high bits in async callbacks (CVE-2026-46193)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: validate dacloffset before building DACL pointers (CVE-2026-46195)

    In the Linux kernel, the following vulnerability has been resolved:

    tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (CVE-2026-46196)

    In the Linux kernel, the following vulnerability has been resolved:

    tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() (CVE-2026-46283)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/scatterlist: fix length calculations in extract_kvec_to_sg (CVE-2026-46289)

    In the Linux kernel, the following vulnerability has been resolved:

    pmdomain: core: Fix detach procedure for virtual devices in genpd (CVE-2026-46292)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix a buffer overflow in ioctl processing (CVE-2026-46294)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303)

    In the Linux kernel, the following vulnerability has been resolved:

    flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

    In the Linux kernel, the following vulnerability has been resolved:

    ptrace: slightly saner 'get_dumpable()' logic (CVE-2026-46333)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
326496	Oracle Linux 9 : kernel (ELSA-2026-36957)	Nessus	Oracle Linux Local Security Checks	high
326446	RockyLinux 9 : kernel (RLSA-2026:36957)	Nessus	Rocky Linux Local Security Checks	high
326426	SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:2839-1)	Nessus	SuSE Local Security Checks	critical
326384	RockyLinux 10 : kernel (RLSA-2026:36956)	Nessus	Rocky Linux Local Security Checks	high
326312	AlmaLinux 9 : kernel (ALSA-2026:36957)	Nessus	Alma Linux Local Security Checks	high
326311	AlmaLinux 10 : kernel (ALSA-2026:36956)	Nessus	Alma Linux Local Security Checks	high
325887	RHEL 10 : kernel (RHSA-2026:36956)	Nessus	Red Hat Local Security Checks	high
325884	RHEL 9 : kernel (RHSA-2026:36957)	Nessus	Red Hat Local Security Checks	high
325283	Debian dla-4671 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
325059	Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
323249	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2658-1)	Nessus	SuSE Local Security Checks	high
323086	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2482-1)	Nessus	SuSE Local Security Checks	high
322088	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1882)	Nessus	Amazon Linux Local Security Checks	high
321988	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-123 (ALASKERNEL-5.10-2026-123)	Nessus	Amazon Linux Local Security Checks	high
321690	SUSE SLES12 Security Update : kernel (SUSE-SU-2026:2450-1)	Nessus	SuSE Local Security Checks	medium
321065	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2310-1)	Nessus	SuSE Local Security Checks	high
321037	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2383-1)	Nessus	SuSE Local Security Checks	medium
319599	Photon OS 5.0: Linux PHSA-2026-5.0-0862	Nessus	PhotonOS Local Security Checks	high
317633	Linux Distros Unpatched Vulnerability : CVE-2026-46113	Nessus	Misc.	high
316975	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1754)	Nessus	Amazon Linux Local Security Checks	high
316942	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1753)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2026-46113

high

Tenable Plugins

Coming Soon

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

medium

high

medium

high

high

high

high