In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply regulator fails in regulator_resolve_supply(), the code currently triggers a lockdep warning: WARNING: drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace: _regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0 regulator_register_resolve_supply+0x28/0xb8 as the regulator_list_mutex must be held when calling _regulator_put(). To solve this, simply switch to using regulator_put(). While at it, we should also make sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate locking to ensure that. While the code in question will be removed altogether in a follow-up commit, I believe it is still beneficial to have this corrected before removal for future reference.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3594-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
    - CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
    - CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
    - CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
    - CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
    - CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
    - CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
    - CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
    - CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
    - CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
    - CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
    - CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
    - CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
    - CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
    - CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
    - CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
    - CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
    - CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
    - CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
    - CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
    - CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
    - CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()     (bsc#1264712).
    - CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
    - CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()     (bsc#1264821).
    - CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
    - CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
    - CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
    - CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
    - CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
    - CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
    - CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
    - CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
    - CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
    - CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
    - CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
    - CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
    - CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked     (bsc#1266000).
    - CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
    - CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
    - CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
    - CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
    - CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
    - CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
    - CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
    - CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
    - CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
    - CVE-2026-45923: net: usb: catc: enable basic endpoint checking (bsc#1266894).
    - CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
    - CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O     (bsc#1266700).
    - CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
    - CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
    - CVE-2026-46018: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (bsc#1266751).
    - CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
    - CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
    - CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).
    - CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).
    - CVE-2026-46049: ALSA: ctxfi: Add fallback to default RSR for S/PDIF (bsc#1267448).
    - CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
    - CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
    - CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).
    - CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).
    - CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).
    - CVE-2026-46088: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()     (bsc#1267226).
    - CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).
    - CVE-2026-46146: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (bsc#1267571).
    - CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()     (bsc#1267648).
    - CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (bsc#1266838).
    - CVE-2026-46167: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (bsc#1266832).
    - CVE-2026-46177: ipmi: Add limits to event and receive message requests (bsc#1267725).
    - CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (bsc#1267493).
    - CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task     (bsc#1266813).
    - CVE-2026-46184: sound: ua101: fix division by zero at probe (bsc#1266864).
    - CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
    - CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).
    - CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
    - CVE-2026-46220: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (bsc#1267704).
    - CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).
    - CVE-2026-46252: regulator: core: fix locking in regulator_resolve_supply() error path (bsc#1267676).
    - CVE-2026-46294: dm: fix a buffer overflow in ioctl processing (bsc#1267939).
    - CVE-2026-46307: wifi: ath5k: do not access array OOB (bsc#1267987).
    - CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).
    - CVE-2026-46322: tun: free page on build_skb failure in tun_xdp_one() (bsc#1267994).
    - CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
    - CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).
    - CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).
    - CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).
    - CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).
    - CVE-2026-52948: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (bsc#1269116).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
    - CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
    - CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).
    - CVE-2026-52982: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (bsc#1269258).
    - CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).
    - CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
    - CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).
    - CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).
    - CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).
    - CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).
    - CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).
    - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
    - CVE-2026-53021: scsi: target: core: Fix integer overflow in UNMAP bounds check (bsc#1269151).
    - CVE-2026-53036: bpf, arm64: Reject out-of-range B.cond targets (bsc#1269389).
    - CVE-2026-53039: ocfs2: validate group add input before caching (bsc#1269392).
    - CVE-2026-53060: dm cache metadata: fix memory leak on metadata abort retry (bsc#1269164).
    - CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).
    - CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).
    - CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).
    - CVE-2026-53093: wifi: brcmfmac: Fix error pointer dereference (bsc#1269414).
    - CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
    - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
    - CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).
    - CVE-2026-53146: thunderbolt: Limit XDomain response copy to actual frame size (bsc#1269826).
    - CVE-2026-53147: thunderbolt: Validate XDomain request packet size before type cast (bsc#1269709).
    - CVE-2026-53149: thunderbolt: Bound root directory content to block size (bsc#1269733).
    - CVE-2026-53167: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (bsc#1269768).
    - CVE-2026-53176: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (bsc#1269710).
    - CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).
    - CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).
    - CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
    - CVE-2026-53208: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (bsc#1269899).
    - CVE-2026-53213: drm/vc4: fix krealloc() memory leak (bsc#1269283).
    - CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).
    - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
    - CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).
    - CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).
    - CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).
    - CVE-2026-53242: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams     (bsc#1269236).
    - CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).
    - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
    - CVE-2026-53249: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (bsc#1269992).
    - CVE-2026-53252: adaption to srcu change of hci_dev in hci_sysfs (bsc#1269307).
    - CVE-2026-53254: Bluetooth: RFCOMM: validate skb length in MCC handlers (bsc#1269996).
    - CVE-2026-53255: Bluetooth: MGMT: validate advertising TLV before type checks (bsc#1269378).
    - CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
    - CVE-2026-53262: l2tp: remove pppol2tp_session_close() (bsc#1270000).
    - CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
    - CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).
    - CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).
    - CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant     (bsc#1269713).
    - CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).
    - CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices (bsc#1269814).
    - CVE-2026-53325: agp/amd64: Fix broken error propagation in agp_amd64_probe() (bsc#1269726).
    - CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
    - CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).
    - CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).
    - CVE-2026-53374: drm/amdgpu: zero-initialize GART table on allocation (bsc#1271827).
    - CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
    - CVE-2026-53376: drm/amdkfd: Add upper bound check for num_of_nodes (bsc#1271831).
    - CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
    - CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
    - CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).
    - CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).
    - CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).
    - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
    - CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()     (bsc#1272268).
    - CVE-2026-63826: fbdev: fix use-after-free in store_modes() (bsc#1272183).
    - CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
    - CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
    - CVE-2026-63899: USB: serial: mxuport: fix memory corruption with small endpoint (bsc#1272494).
    - CVE-2026-63901: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).
    - CVE-2026-63915: nfc: hci: fix out-of-bounds read in HCP header parsing (bsc#1272897).
    - CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
    - CVE-2026-63927: usb: dwc2: Fix use after free in debug code (bsc#1272892).
    - CVE-2026-63928: USB: serial: omninet: fix memory corruption with small endpoint (bsc#1272891).
    - CVE-2026-63958: usb: typec: ucsi: validate connector number in ucsi_connector_change() (bsc#1272467).
    - CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (bsc#1273550).
    - CVE-2026-64330: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (bsc#1272681).
    - CVE-2026-64465: usb: xhci: Fix sleep in atomic context in xhci_free_streams() (bsc#1272843).
    - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).

    The following non security issues were fixed:

    - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (bsc#1264821).
    - dm cache policy smq: check allocation under invalidate lock (git-fixes).
    - dm cache: fix missing return in invalidate_committed's error path (git-fixes).
    - HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (bsc#1266468).
    - KVM: nVMX: use vm_exit_controls_init() to write exit controls for vmcs02 (bsc#1249414).
    - kvm: vmx: Fix entry number check for add_atomic_switch_msr() (git-fixes).
    - mkspec-dtb: Skip missing DTBs.
    - pkspec-dtb: Fix dtb-al rename.
    - sctp: validate embedded address parameter length (git-fixes).
    - tee: fix possible error pointer ctx dereferencing (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4717 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4717-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     August 05, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.262-1     CVE ID         : CVE-2022-49803 CVE-2022-50114 CVE-2023-52494 CVE-2025-23131                      CVE-2025-39931 CVE-2026-23204 CVE-2026-31451 CVE-2026-31755                      CVE-2026-43216 CVE-2026-43219 CVE-2026-43499 CVE-2026-46116                      CVE-2026-46135 CVE-2026-46252 CVE-2026-46331 CVE-2026-52942                      CVE-2026-53138 CVE-2026-53157 CVE-2026-53158 CVE-2026-53159                      CVE-2026-53167 CVE-2026-53177 CVE-2026-53325 CVE-2026-53329                      CVE-2026-53332 CVE-2026-53381 CVE-2026-53382 CVE-2026-53385                      CVE-2026-53392 CVE-2026-53393 CVE-2026-53397 CVE-2026-53398                      CVE-2026-53399 CVE-2026-53400 CVE-2026-53402 CVE-2026-53403                      CVE-2026-63794 CVE-2026-63796 CVE-2026-63798 CVE-2026-63800                      CVE-2026-63801 CVE-2026-63803 CVE-2026-63806 CVE-2026-63808                      CVE-2026-63809 CVE-2026-63814 CVE-2026-63815 CVE-2026-63818                      CVE-2026-63822 CVE-2026-63823 CVE-2026-63824 CVE-2026-63827                      CVE-2026-63828 CVE-2026-63829 CVE-2026-63830 CVE-2026-63831                      CVE-2026-63834 CVE-2026-63835 CVE-2026-63836 CVE-2026-64188                      CVE-2026-64189 CVE-2026-64191 CVE-2026-64206 CVE-2026-64249                      CVE-2026-64252 CVE-2026-64266 CVE-2026-64268 CVE-2026-64271                      CVE-2026-64273 CVE-2026-64274 CVE-2026-64275 CVE-2026-64276                      CVE-2026-64277 CVE-2026-64296 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64303 CVE-2026-64304 CVE-2026-64306 CVE-2026-64312                      CVE-2026-64313 CVE-2026-64315 CVE-2026-64316 CVE-2026-64317                      CVE-2026-64318 CVE-2026-64322 CVE-2026-64323 CVE-2026-64324                      CVE-2026-64329 CVE-2026-64330 CVE-2026-64331 CVE-2026-64332                      CVE-2026-64333 CVE-2026-64334 CVE-2026-64335 CVE-2026-64337                      CVE-2026-64338 CVE-2026-64340 CVE-2026-64342 CVE-2026-64343                      CVE-2026-64344 CVE-2026-64345 CVE-2026-64347 CVE-2026-64348                      CVE-2026-64351 CVE-2026-64359 CVE-2026-64360 CVE-2026-64361                      CVE-2026-64362 CVE-2026-64363 CVE-2026-64364 CVE-2026-64370                      CVE-2026-64371 CVE-2026-64372 CVE-2026-64373 CVE-2026-64374                      CVE-2026-64375 CVE-2026-64378 CVE-2026-64379 CVE-2026-64380                      CVE-2026-64381 CVE-2026-64403 CVE-2026-64406 CVE-2026-64408                      CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64420                      CVE-2026-64422 CVE-2026-64423 CVE-2026-64425 CVE-2026-64429                      CVE-2026-64435 CVE-2026-64436 CVE-2026-64438 CVE-2026-64442                      CVE-2026-64445 CVE-2026-64446 CVE-2026-64448 CVE-2026-64450                      CVE-2026-64452 CVE-2026-64455 CVE-2026-64456 CVE-2026-64461                      CVE-2026-64462 CVE-2026-64465 CVE-2026-64468 CVE-2026-64469                      CVE-2026-64470 CVE-2026-64471 CVE-2026-64475 CVE-2026-64478                      CVE-2026-64483 CVE-2026-64484 CVE-2026-64487 CVE-2026-64488                      CVE-2026-64494 CVE-2026-64495 CVE-2026-64496 CVE-2026-64497                      CVE-2026-64500 CVE-2026-64503 CVE-2026-64504 CVE-2026-64505                      CVE-2026-64510 CVE-2026-64514 CVE-2026-64529 CVE-2026-64534                      CVE-2026-64538 CVE-2026-64540 CVE-2026-64541 CVE-2026-64544                      CVE-2026-64546 CVE-2026-64547 CVE-2026-64548 CVE-2026-64549                      CVE-2026-64550 CVE-2026-64551 CVE-2026-64553 CVE-2026-64554                      CVE-2026-64560

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.262-1. This version additionally includes many more bug fixes     from stable updates 5.10.260-5.10.262.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4700 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4700-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 26, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.177-1~deb11u1     CVE ID         : CVE-2025-23131 CVE-2026-23272 CVE-2026-23278 CVE-2026-23302                      CVE-2026-31451 CVE-2026-46252 CVE-2026-52928 CVE-2026-53138                      CVE-2026-53139 CVE-2026-53157 CVE-2026-53158 CVE-2026-53163                      CVE-2026-53167 CVE-2026-53325 CVE-2026-53327 CVE-2026-53359                      CVE-2026-53362 CVE-2026-53366 CVE-2026-53381 CVE-2026-53382                      CVE-2026-53383 CVE-2026-53384 CVE-2026-53385 CVE-2026-53388                      CVE-2026-53390 CVE-2026-53391 CVE-2026-53397 CVE-2026-53398                      CVE-2026-53403 CVE-2026-63794 CVE-2026-63795 CVE-2026-63796                      CVE-2026-63798 CVE-2026-63800 CVE-2026-63801 CVE-2026-63803                      CVE-2026-63807 CVE-2026-63808 CVE-2026-63809 CVE-2026-63814                      CVE-2026-63817 CVE-2026-63822 CVE-2026-63823 CVE-2026-63824                      CVE-2026-63827 CVE-2026-63828 CVE-2026-63830 CVE-2026-63831                      CVE-2026-63833 CVE-2026-63834 CVE-2026-63835 CVE-2026-63836                      CVE-2026-64188 CVE-2026-64191 CVE-2026-64246 CVE-2026-64249                      CVE-2026-64252 CVE-2026-64254 CVE-2026-64529     Debian Bug     : 1130365

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.177-1~deb11u1.  This version additionally updates the Microsoft     Azure Network Adapter (mana) driver, and includes many more bug fixes     from stable update 6.1.177.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.260-259.1053. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-126 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio (CVE-2026-31451)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (CVE-2026-31755)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

    In the Linux kernel, the following vulnerability has been resolved:

    regulator: core: fix locking in regulator_resolve_supply() error path (CVE-2026-46252)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: use list_del_rcu for netlink hooks (CVE-2026-46324)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: fix pedit partial COW leading to page cache corruption (CVE-2026-46331)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_vti: set netns_immutable on the fallback device. (CVE-2026-52909)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops (CVE-2026-53078)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (CVE-2026-53167)

    In the Linux kernel, the following vulnerability has been resolved:

    bnxt_en: Fix NULL pointer dereference (CVE-2026-53177)

    In the Linux kernel, the following vulnerability has been resolved:

    l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (CVE-2026-53262)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

    In the Linux kernel, the following vulnerability has been resolved:

    virtiofs: fix UAF on submount umount

    iput() called from fuse_release_end() can Oops if the super block hasalready been destroyed.  Normally     this is prevented by waiting fornum_waiting to go down to zero before commencing with super block     shutdown.

    This only works, however, for the last submount instance, as the waitcounter is per connection, not per     superblock.

    Revert to using synchronous release requests for the auto_submounts case,which is virtiofs only at this     time. (CVE-2026-53381)

    In the Linux kernel, the following vulnerability has been resolved:

    vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write

    A KASAN null-ptr-deref was observed in vcs_notifier():

    BUG: KASAN: null-ptr-deref in vcs_notifier+0x98/0x130Read of size 2 at addr qmp_cmd_name:
    qmp_capabilities, arguments: {}

    The issue is a race condition in vcs_write(). When the console_lock istemporarily dropped (to copy data     from userspace), the vc_data pointerobtained from vcs_vc() may become stale. After re-acquiring the     lock,vcs_vc() is called again to re-validate the pointer. If the vc has beendeallocated in the meantime,     vcs_vc() returns NULL, and the while loopbreaks (with written > 0). However, after the loop,     vcs_scr_updated(vc)is still called with the now-NULL vc pointer, leading to a null pointerdereference in     the notifier chain (vcs_notifier dereferences param->vc).

    Fix this by adding a NULL check for vc before calling vcs_scr_updated(). (CVE-2026-53385)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

    info->var, a framebuffer's current mode, is expected to have a matchingentry in info->modelist.
    var_to_display() relies on this and treats afailed fb_match_mode() as This should not happen.
    fb_set_var() keeps ittrue by adding the mode to the list on every change, anddo_register_framebuffer()     does the same at registration.

    store_modes() replaces the modelist from userspace. fb_new_modelist()validates the new modes but does not     check that info->var still has amatch. It relies on fbcon_new_modelist() to re-point consoles, but     thatonly handles consoles mapped to the framebuffer. With fbcon unbound thereare none, so info->var is     left describing a mode that is no longer in thelist.

    A later console takeover runs var_to_display(), where fb_match_mode()returns NULL and leaves     fb_display[i].mode NULL. fbcon_switch() passes itto display_to_var(), and fb_videomode_to_var()     dereferences the NULL mode.

    Keep the current mode in the list in fb_new_modelist(), the same wayfb_set_var() does. (CVE-2026-53403)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)

    In the Linux kernel, the following vulnerability has been resolved:

    pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: use kvfree() for replaced sysctl write buffer (CVE-2026-63809)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)

    In the Linux kernel, the following vulnerability has been resolved:

    KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: stub: Reject I2C block transfers with invalid length

    The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0]as the transfer length. The existing     check only clamps it to avoidoverrunning the chip->words[256] register array, but does not validateit     against I2C_SMBUS_BLOCK_MAX (32), which is the limit of the unioni2c_smbus_data.block buffer (34 bytes     total). The driver is adevelopment/test tool (CONFIG_I2C_STUB=m, not built by default)that must be loaded     with a chip_addr= parameter.

    A local user with access to /dev/i2c-* can issue an I2C_SMBUS ioctlwith I2C_SMBUS_I2C_BLOCK_DATA and     data->block[0] > 32, causingstub_xfer() to read or write past the end of the unioni2c_smbus_data.block     buffer:

    BUG: KASAN: stack-out-of-bounds in stub_xfer (drivers/i2c/i2c-stub.c:223)Read of size 1 at addr     ffff88800abcfd92 by task exploit/81Call Trace:<TASK>stub_xfer (drivers/i2c/i2c-stub.c:223)__i2c_smbus_xfer     (drivers/i2c/i2c-core-smbus.c:593)i2c_smbus_xfer (drivers/i2c/i2c-core-smbus.c:536)i2cdev_ioctl_smbus     (drivers/i2c/i2c-dev.c:391)i2cdev_ioctl (drivers/i2c/i2c-dev.c:478)__x64_sys_ioctl     (fs/ioctl.c:583)do_syscall_64 (arch/x86/entry/syscall_64.c:94)entry_SYSCALL_64_after_hwframe     (arch/x86/entry/entry_64.S:130)</TASK>

    The bug exists because i2c-stub implements .smbus_xfer directly,bypassing the I2C_SMBUS_BLOCK_MAX     validation ini2c_smbus_xfer_emulated(). The I2C_SMBUS_BLOCK_DATA case in the samefunction correctly     validates against I2C_SMBUS_BLOCK_MAX, but theI2C_SMBUS_I2C_BLOCK_DATA case does not.

    Fix by rejecting transfers with data->block[0] == 0 ordata->block[0] > I2C_SMBUS_BLOCK_MAX with -EINVAL,     consistent withboth the I2C_SMBUS_BLOCK_DATA case in the same function and theI2C_SMBUS_I2C_BLOCK_DATA     validation in i2c_smbus_xfer_emulated(). (CVE-2026-64191)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4688 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4688-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 18, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.177-1     CVE ID         : CVE-2025-23131 CVE-2026-23272 CVE-2026-23278 CVE-2026-23302                      CVE-2026-31451 CVE-2026-46252 CVE-2026-52928 CVE-2026-53138                      CVE-2026-53139 CVE-2026-53157 CVE-2026-53158 CVE-2026-53163                      CVE-2026-53167 CVE-2026-53325 CVE-2026-53327 CVE-2026-53359                      CVE-2026-53362 CVE-2026-53366     Debian Bug     : 1130365

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.177-1.  This version additionally updates the Microsoft Azure     Network Adapter (mana) driver, and includes many more bug fixes from     stable update 6.1.177.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6381 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6381-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 05, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010                      CVE-2026-43216 CVE-2026-43355 CVE-2026-46054 CVE-2026-46242                      CVE-2026-46252 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101                      CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157                      CVE-2026-53163 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325                      CVE-2026-53327 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361                      CVE-2026-53362     Debian Bug     : 1136179 1139686

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.95-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - regulator: core: fix locking in regulator_resolve_supply() error path If late enabling of a supply     regulator fails in regulator_resolve_supply(), the code currently triggers a lockdep warning: WARNING:
    drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace:
    _regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0     regulator_register_resolve_supply+0x28/0xb8 as the regulator_list_mutex must be held when calling
    _regulator_put(). To solve this, simply switch to using regulator_put(). While at it, we should also make     sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate     locking to ensure that. While the code in question will be removed altogether in a follow-up commit, I     believe it is still beneficial to have this corrected before removal for future reference.
    (CVE-2026-46252)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
335089	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3594-1)	Nessus	SuSE Local Security Checks	Local	high
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
333954	Photon OS 5.0: Linux PHSA-2026-5.0-92-0916	Nessus	PhotonOS Local Security Checks	Local	high
333941	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	Nessus	PhotonOS Local Security Checks	Local	high
332715	Debian dla-4717 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
332511	Photon OS 5.0: Linux PHSA-2026-5.0-91-0916	Nessus	PhotonOS Local Security Checks	Local	high
330014	Debian dla-4700 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	Local	high
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	Local	high
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	Local	medium
328495	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-126 (ALASKERNEL-5.10-2026-126)	Nessus	Amazon Linux Local Security Checks	Local	high
327788	Debian dla-4688 : ata-modules-6.1.0-48-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
326306	Photon OS 4.0: Linux PHSA-2026-4.0-1054	Nessus	PhotonOS Local Security Checks	Local	high
326038	Photon OS 5.0: Linux PHSA-2026-5.0-0916	Nessus	PhotonOS Local Security Checks	Local	high
325146	Debian dsa-6381 : ata-modules-6.12.90+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
318564	Linux Distros Unpatched Vulnerability : CVE-2026-46252	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-46252

medium

Tenable Plugins

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

medium