In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() rfcomm_get_sock_by_channel() scans rfcomm_sk_list under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcomm_connect_ind() then locks the listener, queues a child socket on it, and may notify it after unlocking it. The buggy scenario involves two paths, with each column showing the order within that path: rfcomm_connect_ind(): listener close: 1. Find parent in 1. close() enters rfcomm_get_sock_by_channel() rfcomm_sock_release(). 2. Drop rfcomm_sk_list.lock 2. rfcomm_sock_shutdown() without pinning parent. closes the listener. 3. Call lock_sock(parent) and 3. rfcomm_sock_kill() bt_accept_enqueue(parent, unlinks and puts parent. sk, true). 4. Read parent flags and may 4. parent can be freed. call sk_state_change(). If close wins the race, parent can be freed before rfcomm_connect_ind() reaches lock_sock(), bt_accept_enqueue(), or the deferred-setup callback. Take a reference on the listener before leaving rfcomm_sk_list.lock. After lock_sock() succeeds, recheck that it is still in BT_LISTEN before queueing a child, cache the deferred-setup bit while the parent is locked, and drop the reference after the last parent use. KASAN reported a slab-use-after-free in lock_sock_nested() from rfcomm_connect_ind(), with the freeing stack going through rfcomm_sock_kill() and rfcomm_sock_release().

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3809-1 advisory.

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
    - CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
    - CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
    - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
    - CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
    - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
    - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
    - CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
    - CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()     (bsc#1272268).
    - CVE-2026-63922: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
    - CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
    - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
    - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).

    The following non security issues were fixed:

    - scripts/cve_tools/kpm-bot: quote branch pattern properly.
    - sctp: validate embedded address parameter length (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3593-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
    - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
    - CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
    - CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
    - CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
    - CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
    - CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
    - CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
    - CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
    - CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
    - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
    - CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
    - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
    - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
    - CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
    - CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
    - CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
    - CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
    - CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
    - CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
    - CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
    - CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
    - CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
    - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
    - CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()     (bsc#1272268).
    - CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level     (bsc#1272263).
    - CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
    - CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
    - CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
    - CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
    - CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
    - CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
    - CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
    - CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
    - CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
    - CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
    - CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp()     (bsc#1273035).
    - CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits     (bsc#1272242).
    - CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
    - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available     (bsc#1273231).
    - CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1273004).
    - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).

    The following non security issues were fixed:

    - hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() (bsc#1271912).
    - mkspec-dtb: Skip missing DTBs.
    - pkspec-dtb: Fix dtb-al rename.
    - posix-cpu-timers: Cleanup the firing logic (bsc#1271912).
    - posix-cpu-timers: Correctly update timer status in posix_cpu_timer_del() (bsc#1271912).
    - posix-cpu-timers: Do not arm SIGEV_NONE timers (bsc#1271912).
    - posix-cpu-timers: Handle interval timers correctly in timer_get() (bsc#1271912).
    - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (bsc#1271912).
    - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (bsc#1271912).
    - posix-cpu-timers: Make k_itimer::it_active consistent (bsc#1271912).
    - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (bsc#1271912).
    - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (bsc#1271912).
    - posix-cpu-timers: Simplify posix_cpu_timer_set() (bsc#1271912).
    - posix-cpu-timers: Split up posix_cpu_timer_get() (bsc#1271912).
    - posix-cpu-timers: Use @now instead of @val for clarity (bsc#1271912).
    - posix-timers: Add proper state tracking (bsc#1271912).
    - posix-timers: Avoid direct access to hrtimer clockbase (bsc#1271912).
    - posix-timers: Clarify posix_timer_fn() comments (bsc#1271912).
    - posix-timers: Clear overrun in common_timer_set() (bsc#1271912).
    - posix-timers: Consolidate signal queueing (bsc#1271912).
    - posix-timers: Consolidate timer setup (bsc#1271912).
    - posix-timers: Cure si_sys_private race (bsc#1271912).
    - posix-timers: Document common_clock_get() correctly (bsc#1271912).
    - posix-timers: Expand timer_arm() callbacks with a boolean return value (bsc#1271912).
    - posix-timers: Polish coding style in a few places (bsc#1271912).
    - posix-timers: Retrieve interval in common timer_settime() code (bsc#1271912).
    - sctp: validate embedded address parameter length (git-fixes).
    - time: Switch to hrtimer_setup() (bsc#1271912).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3594-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
    - CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
    - CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
    - CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
    - CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
    - CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
    - CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
    - CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
    - CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
    - CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
    - CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
    - CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
    - CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
    - CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
    - CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
    - CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
    - CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
    - CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
    - CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
    - CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
    - CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
    - CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()     (bsc#1264712).
    - CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
    - CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()     (bsc#1264821).
    - CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
    - CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
    - CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
    - CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
    - CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
    - CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
    - CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
    - CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
    - CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
    - CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
    - CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
    - CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
    - CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked     (bsc#1266000).
    - CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
    - CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
    - CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
    - CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
    - CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
    - CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
    - CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
    - CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
    - CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).
    - CVE-2026-45923: net: usb: catc: enable basic endpoint checking (bsc#1266894).
    - CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
    - CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O     (bsc#1266700).
    - CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
    - CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740).
    - CVE-2026-46018: ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (bsc#1266751).
    - CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
    - CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
    - CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (bsc#1266692).
    - CVE-2026-46040: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (bsc#1267472).
    - CVE-2026-46049: ALSA: ctxfi: Add fallback to default RSR for S/PDIF (bsc#1267448).
    - CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).
    - CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
    - CVE-2026-46064: ibmasm: fix heap over-read in ibmasm_send_i2o_message() (bsc#1267497).
    - CVE-2026-46068: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).
    - CVE-2026-46086: net: bridge: use a stable FDB dst snapshot in RCU readers (bsc#1267524).
    - CVE-2026-46088: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()     (bsc#1267226).
    - CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (bsc#1267502).
    - CVE-2026-46146: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (bsc#1267571).
    - CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()     (bsc#1267648).
    - CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (bsc#1266838).
    - CVE-2026-46167: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (bsc#1266832).
    - CVE-2026-46177: ipmi: Add limits to event and receive message requests (bsc#1267725).
    - CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (bsc#1267493).
    - CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task     (bsc#1266813).
    - CVE-2026-46184: sound: ua101: fix division by zero at probe (bsc#1266864).
    - CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
    - CVE-2026-46191: fbcon: Avoid OOB font access if console rotation fails (bsc#1267690).
    - CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
    - CVE-2026-46220: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (bsc#1267704).
    - CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678).
    - CVE-2026-46252: regulator: core: fix locking in regulator_resolve_supply() error path (bsc#1267676).
    - CVE-2026-46294: dm: fix a buffer overflow in ioctl processing (bsc#1267939).
    - CVE-2026-46307: wifi: ath5k: do not access array OOB (bsc#1267987).
    - CVE-2026-46321: tun: free page on short-frame rejection in tun_xdp_one() (bsc#1268024).
    - CVE-2026-46322: tun: free page on build_skb failure in tun_xdp_one() (bsc#1267994).
    - CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659).
    - CVE-2026-52915: netfilter: ip6t_hbh: reject oversized option lists (bsc#1269001).
    - CVE-2026-52927: netfilter: ebtables: fix OOB read in compat_mtw_from_user (bsc#1269027).
    - CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates (bsc#1269003).
    - CVE-2026-52942: netfilter: nf_log: validate MAC header was set before dumping it (bsc#1268967).
    - CVE-2026-52948: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (bsc#1269116).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
    - CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
    - CVE-2026-52981: neigh: let neigh_xmit take skb ownership (bsc#1269254).
    - CVE-2026-52982: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (bsc#1269258).
    - CVE-2026-52984: net/sched: netem: fix queue limit check to include reordered packets (bsc#1269272).
    - CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
    - CVE-2026-52995: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).
    - CVE-2026-52998: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (bsc#1269118).
    - CVE-2026-53002: netfilter: conntrack: remove sprintf usage (bsc#1269112).
    - CVE-2026-53004: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (bsc#1269106).
    - CVE-2026-53006: ipv6: fix possible UAF in icmpv6_rcv() (bsc#1269104).
    - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
    - CVE-2026-53021: scsi: target: core: Fix integer overflow in UNMAP bounds check (bsc#1269151).
    - CVE-2026-53036: bpf, arm64: Reject out-of-range B.cond targets (bsc#1269389).
    - CVE-2026-53039: ocfs2: validate group add input before caching (bsc#1269392).
    - CVE-2026-53060: dm cache metadata: fix memory leak on metadata abort retry (bsc#1269164).
    - CVE-2026-53062: dm cache policy smq: fix missing locks in invalidating cache blocks (bsc#1269658).
    - CVE-2026-53063: dm cache: fix write hang in passthrough mode (bsc#1269659).
    - CVE-2026-53064: dm cache: fix null-deref with concurrent writes in passthrough mode (bsc#1269132).
    - CVE-2026-53093: wifi: brcmfmac: Fix error pointer dereference (bsc#1269414).
    - CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
    - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
    - CVE-2026-53134: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).
    - CVE-2026-53146: thunderbolt: Limit XDomain response copy to actual frame size (bsc#1269826).
    - CVE-2026-53147: thunderbolt: Validate XDomain request packet size before type cast (bsc#1269709).
    - CVE-2026-53149: thunderbolt: Bound root directory content to block size (bsc#1269733).
    - CVE-2026-53167: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (bsc#1269768).
    - CVE-2026-53176: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (bsc#1269710).
    - CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).
    - CVE-2026-53186: RDMA/srp: bound SRP_RSP sense copy by the received length (bsc#1269663).
    - CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
    - CVE-2026-53208: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (bsc#1269899).
    - CVE-2026-53213: drm/vc4: fix krealloc() memory leak (bsc#1269283).
    - CVE-2026-53218: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (bsc#1269273).
    - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
    - CVE-2026-53225: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (bsc#1269711).
    - CVE-2026-53227: net: openvswitch: fix possible kfree_skb of ERR_PTR (bsc#1269877).
    - CVE-2026-53236: tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1269994).
    - CVE-2026-53242: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams     (bsc#1269236).
    - CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).
    - CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
    - CVE-2026-53249: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (bsc#1269992).
    - CVE-2026-53252: adaption to srcu change of hci_dev in hci_sysfs (bsc#1269307).
    - CVE-2026-53254: Bluetooth: RFCOMM: validate skb length in MCC handlers (bsc#1269996).
    - CVE-2026-53255: Bluetooth: MGMT: validate advertising TLV before type checks (bsc#1269378).
    - CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
    - CVE-2026-53262: l2tp: remove pppol2tp_session_close() (bsc#1270000).
    - CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
    - CVE-2026-53268: netfilter: conntrack_irc: fix possible out-of-bounds read (bsc#1269257).
    - CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit (bsc#1269240).
    - CVE-2026-53273: tee: optee: prevent use-after-free when the client exits before the supplicant     (bsc#1269713).
    - CVE-2026-53275: ipv6: mcast: Fix use-after-free when processing MLD queries (bsc#1269810).
    - CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices (bsc#1269814).
    - CVE-2026-53325: agp/amd64: Fix broken error propagation in agp_amd64_probe() (bsc#1269726).
    - CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
    - CVE-2026-53355: net: rds: clear i_sends on setup unwind (bsc#1270249).
    - CVE-2026-53369: udf: reject descriptors with oversized CRC length (bsc#1271818).
    - CVE-2026-53374: drm/amdgpu: zero-initialize GART table on allocation (bsc#1271827).
    - CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
    - CVE-2026-53376: drm/amdkfd: Add upper bound check for num_of_nodes (bsc#1271831).
    - CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
    - CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
    - CVE-2026-53392: NFSv4/flexfiles: reject zero filehandle version count (bsc#1271826).
    - CVE-2026-53397: nfsd: fix posix_acl leak on SETACL decode failure (bsc#1271869).
    - CVE-2026-53399: nfsd: release layout stid on setlease failure (bsc#1271832).
    - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
    - CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()     (bsc#1272268).
    - CVE-2026-63826: fbdev: fix use-after-free in store_modes() (bsc#1272183).
    - CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
    - CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
    - CVE-2026-63899: USB: serial: mxuport: fix memory corruption with small endpoint (bsc#1272494).
    - CVE-2026-63901: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).
    - CVE-2026-63915: nfc: hci: fix out-of-bounds read in HCP header parsing (bsc#1272897).
    - CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
    - CVE-2026-63927: usb: dwc2: Fix use after free in debug code (bsc#1272892).
    - CVE-2026-63928: USB: serial: omninet: fix memory corruption with small endpoint (bsc#1272891).
    - CVE-2026-63958: usb: typec: ucsi: validate connector number in ucsi_connector_change() (bsc#1272467).
    - CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (bsc#1273550).
    - CVE-2026-64330: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (bsc#1272681).
    - CVE-2026-64465: usb: xhci: Fix sleep in atomic context in xhci_free_streams() (bsc#1272843).
    - CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).
    - CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (bsc#1271526).

    The following non security issues were fixed:

    - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (bsc#1264821).
    - dm cache policy smq: check allocation under invalidate lock (git-fixes).
    - dm cache: fix missing return in invalidate_committed's error path (git-fixes).
    - HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (bsc#1266468).
    - KVM: nVMX: use vm_exit_controls_init() to write exit controls for vmcs02 (bsc#1249414).
    - kvm: vmx: Fix entry number check for add_atomic_switch_msr() (git-fixes).
    - mkspec-dtb: Skip missing DTBs.
    - pkspec-dtb: Fix dtb-al rename.
    - sctp: validate embedded address parameter length (git-fixes).
    - tee: fix possible error pointer ctx dereferencing (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3156-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484).
    - CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
    - CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).
    - CVE-2026-46076: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (bsc#1267365).
    - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).
    - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).
    - CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).
    - CVE-2026-46242: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).
    - CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).
    - CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).
    - CVE-2026-46289: lib/scatterlist: fix length calculations in extract_kvec_to_sg (bsc#1267966).
    - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).
    - CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).
    - CVE-2026-46330: Revert 'net/smc: Introduce TCP ULP support' (bsc#1268049).
    - CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).
    - CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).
    - CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).
    - CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).
    - CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
    - CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).
    - CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).
    - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
    - CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
    - CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).
    - CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).
    - CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).
    - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).
    - CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).
    - CVE-2026-53052: ASoC: qcom: qdsp6: topology: check widget type before accessing data (bsc#1269314).
    - CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid (bsc#1269310).
    - CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).
    - CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).
    - CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269821).
    - CVE-2026-53178: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction     (bsc#1269795).
    - CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269884).
    - CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
    - CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling     (bsc#1269574).
    - CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
    - CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
    - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).
    - CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269493).
    - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271366).

    The following non security issues were fixed:

    - hv_balloon: Simplify data output in hv_balloon_debug_show() (git-fixes).
    - ipv4: account for fraggap on the paged allocation path (git-fixes).
    - ipv6: account for fraggap on the paged allocation path (git-fixes).
    - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (bsc#1271050).
    - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (bsc#1271050).
    - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (bsc#1271050).
    - KVM: x86: Fix shadow paging use-after-free due to unexpected role (git-fixes).
    - loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompression (jsc#PED-16303).
    - loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported (jsc#PED-16303).
    - module: fix init_module_from_file() error handling (jsc#PED-16303).
    - module: make waiting for a concurrent module loader interruptible (jsc#PED-16303).
    - module: Split modules_install compression and in-kernel decompression (jsc#PED-16303).
    - module: split up 'finit_module()' into init_module_from_file() helper (jsc#PED-16303).
    - module: warn about excessively long module waits (jsc#PED-16303).
    - modules: catch concurrent module loads, treat them as idempotent (jsc#PED-16303).
    - net: mana: Add support for PF device 0x00C1 (bsc#1268237).
    - net: mana: Allocate interrupt context for each EQ when creating vPort (git-fixes).
    - net: mana: Create separate EQs for each vPort (git-fixes).
    - net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 (git-fixes).
    - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check (git-fixes).
    - net: mana: initialize gdma queue id to INVALID_QUEUE_ID (git-fixes).
    - net: mana: Introduce GIC context with refcounting for interrupt management (git-fixes).
    - net: mana: Optimize irq affinity for low vcpu configs (git-fixes).
    - net: mana: Query device capabilities and configure MSI-X sharing for EQs (git-fixes).
    - net: mana: Use GIC functions to allocate global EQs (git-fixes).
    - RDMA/mana_ib: Allocate interrupt contexts on EQs (git-fixes).
    - RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed (git-fixes).
    - scsi: storvsc: Replace symbolic permissions with octal (git-fixes).
    - scsi: target: Fix hexadecimal CHAP_I handling (git-fixes).
    - x86/platform/uv: Expose the uv_hub_type() interface (jsc#PED-16305).
    - x86/tsc: Disable clocksource watchdog checking on recent and future UV platforms (jsc#PED-16305).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4671 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4671-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 05, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.176-1~deb11u1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.176-1~deb11u1.  This version additionally includes many more bug     fixes from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4665 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4665-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 03, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.176-1     CVE ID         : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271                      CVE-2023-54322 CVE-2024-27012 CVE-2024-36922 CVE-2024-53221                      CVE-2024-56657 CVE-2025-10263 CVE-2025-21739 CVE-2025-21863                      CVE-2025-22105 CVE-2025-37864 CVE-2025-38584 CVE-2025-38627                      CVE-2025-38710 CVE-2025-39997 CVE-2025-40347 CVE-2025-68201                      CVE-2025-68315 CVE-2025-68823 CVE-2026-23066 CVE-2026-23255                      CVE-2026-23310 CVE-2026-23389 CVE-2026-23399 CVE-2026-23442                      CVE-2026-23444 CVE-2026-23468 CVE-2026-31407 CVE-2026-31449                      CVE-2026-31488 CVE-2026-31489 CVE-2026-31500 CVE-2026-31532                      CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580                      CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586                      CVE-2026-31587 CVE-2026-31588 CVE-2026-31590 CVE-2026-31594                      CVE-2026-31595 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31611 CVE-2026-31612 CVE-2026-31613                      CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618                      CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624                      CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629                      CVE-2026-31630 CVE-2026-31637 CVE-2026-31642 CVE-2026-31673                      CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685                      CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698                      CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31702                      CVE-2026-31704 CVE-2026-31705 CVE-2026-31708 CVE-2026-31709                      CVE-2026-31711 CVE-2026-31712 CVE-2026-31715 CVE-2026-31716                      CVE-2026-43052 CVE-2026-43058 CVE-2026-43064 CVE-2026-43071                      CVE-2026-43072 CVE-2026-43075 CVE-2026-43076 CVE-2026-43079                      CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093                      CVE-2026-43094 CVE-2026-43098 CVE-2026-43099 CVE-2026-43103                      CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111                      CVE-2026-43112 CVE-2026-43113 CVE-2026-43114 CVE-2026-43116                      CVE-2026-43117 CVE-2026-43219 CVE-2026-43303 CVE-2026-43350                      CVE-2026-43421 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494                      CVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43499                      CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835                      CVE-2026-45836 CVE-2026-45838 CVE-2026-45839 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45930 CVE-2026-45986                      CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-45996                      CVE-2026-45997 CVE-2026-45999 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46005 CVE-2026-46006 CVE-2026-46009                      CVE-2026-46015 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021                      CVE-2026-46022 CVE-2026-46023 CVE-2026-46024 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46031 CVE-2026-46033 CVE-2026-46037                      CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044                      CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46050                      CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056                      CVE-2026-46058 CVE-2026-46062 CVE-2026-46064 CVE-2026-46065                      CVE-2026-46069 CVE-2026-46070 CVE-2026-46072 CVE-2026-46075                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46079 CVE-2026-46080                      CVE-2026-46082 CVE-2026-46083 CVE-2026-46086 CVE-2026-46088                      CVE-2026-46091 CVE-2026-46098 CVE-2026-46099 CVE-2026-46101                      CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108                      CVE-2026-46109 CVE-2026-46110 CVE-2026-46112 CVE-2026-46113                      CVE-2026-46116 CVE-2026-46119 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46123 CVE-2026-46124 CVE-2026-46125 CVE-2026-46127                      CVE-2026-46128 CVE-2026-46129 CVE-2026-46132 CVE-2026-46133                      CVE-2026-46136 CVE-2026-46137 CVE-2026-46143 CVE-2026-46146                      CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159                      CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46164                      CVE-2026-46165 CVE-2026-46167 CVE-2026-46168 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46173 CVE-2026-46177 CVE-2026-46178                      CVE-2026-46179 CVE-2026-46180 CVE-2026-46184 CVE-2026-46185                      CVE-2026-46186 CVE-2026-46187 CVE-2026-46189 CVE-2026-46190                      CVE-2026-46191 CVE-2026-46193 CVE-2026-46195 CVE-2026-46196                      CVE-2026-46197 CVE-2026-46198 CVE-2026-46199 CVE-2026-46205                      CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212                      CVE-2026-46214 CVE-2026-46218 CVE-2026-46220 CVE-2026-46227                      CVE-2026-46230 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234                      CVE-2026-46235 CVE-2026-46236 CVE-2026-46238 CVE-2026-46273                      CVE-2026-46275 CVE-2026-46276 CVE-2026-46280 CVE-2026-46285                      CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46296                      CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304                      CVE-2026-46306 CVE-2026-46307 CVE-2026-46314 CVE-2026-46319                      CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46323                      CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 CVE-2026-52911                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52933                      CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52941                      CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947                      CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957                      CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52967                      CVE-2026-52968 CVE-2026-52969 CVE-2026-52970 CVE-2026-52972                      CVE-2026-52974 CVE-2026-52975 CVE-2026-52977 CVE-2026-52981                      CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986                      CVE-2026-52989 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995                      CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002                      CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011                      CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53022                      CVE-2026-53023 CVE-2026-53033 CVE-2026-53034 CVE-2026-53035                      CVE-2026-53036 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040                      CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53046                      CVE-2026-53047 CVE-2026-53048 CVE-2026-53049 CVE-2026-53050                      CVE-2026-53052 CVE-2026-53056 CVE-2026-53059 CVE-2026-53060                      CVE-2026-53061 CVE-2026-53062 CVE-2026-53063 CVE-2026-53064                      CVE-2026-53065 CVE-2026-53066 CVE-2026-53068 CVE-2026-53069                      CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074                      CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082                      CVE-2026-53086 CVE-2026-53088 CVE-2026-53093 CVE-2026-53096                      CVE-2026-53111 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53131 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135                      CVE-2026-53136 CVE-2026-53137 CVE-2026-53146 CVE-2026-53147                      CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53159                      CVE-2026-53160 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176                      CVE-2026-53177 CVE-2026-53181 CVE-2026-53182 CVE-2026-53183                      CVE-2026-53184 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194                      CVE-2026-53195 CVE-2026-53196 CVE-2026-53198 CVE-2026-53199                      CVE-2026-53207 CVE-2026-53208 CVE-2026-53209 CVE-2026-53212                      CVE-2026-53213 CVE-2026-53215 CVE-2026-53216 CVE-2026-53217                      CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223                      CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53236                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53252 CVE-2026-53253 CVE-2026-53254                      CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264                      CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270                      CVE-2026-53273 CVE-2026-53274 CVE-2026-53275 CVE-2026-53279                      CVE-2026-53287 CVE-2026-53289 CVE-2026-53291 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53303 CVE-2026-53304                      CVE-2026-53306 CVE-2026-53309 CVE-2026-53314 CVE-2026-53320                      CVE-2026-53329 CVE-2026-53331 CVE-2026-53337 CVE-2026-53339                      CVE-2026-53343 CVE-2026-53349 CVE-2026-53350 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.176-1.  This version additionally includes many more bug fixes     from stable updates 6.1.175 and 6.1.176.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4664 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4664-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 03, 2026                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.259-1     CVE ID         : CVE-2021-47188 CVE-2021-47211 CVE-2022-48703 CVE-2022-49135                      CVE-2022-49158 CVE-2022-49183 CVE-2022-49822 CVE-2022-50073                      CVE-2022-50472 CVE-2022-50493 CVE-2022-50552 CVE-2023-53133                      CVE-2023-53421 CVE-2023-53596 CVE-2023-54129 CVE-2024-43902                      CVE-2025-10263 CVE-2025-21863 CVE-2025-22026 CVE-2025-22107                      CVE-2025-38129 CVE-2025-38250 CVE-2025-38584 CVE-2025-38710                      CVE-2025-39929 CVE-2025-40164 CVE-2025-68340 CVE-2026-23066                      CVE-2026-23099 CVE-2026-23442 CVE-2026-23444 CVE-2026-31407                      CVE-2026-31449 CVE-2026-31489 CVE-2026-31532 CVE-2026-31576                      CVE-2026-31577 CVE-2026-31578 CVE-2026-31580 CVE-2026-31581                      CVE-2026-31583 CVE-2026-31585 CVE-2026-31586 CVE-2026-31588                      CVE-2026-31590 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598                      CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605                      CVE-2026-31607 CVE-2026-31615 CVE-2026-31616 CVE-2026-31617                      CVE-2026-31618 CVE-2026-31619 CVE-2026-31622 CVE-2026-31623                      CVE-2026-31624 CVE-2026-31625 CVE-2026-31626 CVE-2026-31627                      CVE-2026-31629 CVE-2026-31630 CVE-2026-31634 CVE-2026-31637                      CVE-2026-31642 CVE-2026-31656 CVE-2026-31657 CVE-2026-31664                      CVE-2026-31673 CVE-2026-31676 CVE-2026-31681 CVE-2026-31684                      CVE-2026-31685 CVE-2026-31686 CVE-2026-31696 CVE-2026-31697                      CVE-2026-31698 CVE-2026-31699 CVE-2026-31700 CVE-2026-31701                      CVE-2026-31708 CVE-2026-31715 CVE-2026-43052 CVE-2026-43058                      CVE-2026-43075 CVE-2026-43076 CVE-2026-43080 CVE-2026-43085                      CVE-2026-43089 CVE-2026-43093 CVE-2026-43103 CVE-2026-43104                      CVE-2026-43105 CVE-2026-43110 CVE-2026-43111 CVE-2026-43113                      CVE-2026-43114 CVE-2026-43117 CVE-2026-43281 CVE-2026-43350                      CVE-2026-43492 CVE-2026-43493 CVE-2026-43494 CVE-2026-43496                      CVE-2026-43497 CVE-2026-43501 CVE-2026-43502 CVE-2026-45834                      CVE-2026-45835 CVE-2026-45836 CVE-2026-45838 CVE-2026-45840                      CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844                      CVE-2026-45846 CVE-2026-45850 CVE-2026-45986 CVE-2026-45987                      CVE-2026-45991 CVE-2026-45994 CVE-2026-46002 CVE-2026-46003                      CVE-2026-46004 CVE-2026-46006 CVE-2026-46018 CVE-2026-46019                      CVE-2026-46021 CVE-2026-46022 CVE-2026-46023 CVE-2026-46026                      CVE-2026-46027 CVE-2026-46033 CVE-2026-46038 CVE-2026-46040                      CVE-2026-46043 CVE-2026-46044 CVE-2026-46046 CVE-2026-46047                      CVE-2026-46049 CVE-2026-46051 CVE-2026-46052 CVE-2026-46053                      CVE-2026-46056 CVE-2026-46064 CVE-2026-46069 CVE-2026-46070                      CVE-2026-46077 CVE-2026-46078 CVE-2026-46080 CVE-2026-46086                      CVE-2026-46088 CVE-2026-46090 CVE-2026-46091 CVE-2026-46098                      CVE-2026-46101 CVE-2026-46102 CVE-2026-46103 CVE-2026-46107                      CVE-2026-46108 CVE-2026-46109 CVE-2026-46120 CVE-2026-46122                      CVE-2026-46124 CVE-2026-46127 CVE-2026-46128 CVE-2026-46132                      CVE-2026-46133 CVE-2026-46137 CVE-2026-46146 CVE-2026-46149                      CVE-2026-46150 CVE-2026-46151 CVE-2026-46159 CVE-2026-46160                      CVE-2026-46161 CVE-2026-46163 CVE-2026-46167 CVE-2026-46169                      CVE-2026-46172 CVE-2026-46177 CVE-2026-46178 CVE-2026-46180                      CVE-2026-46184 CVE-2026-46187 CVE-2026-46189 CVE-2026-46191                      CVE-2026-46196 CVE-2026-46198 CVE-2026-46205 CVE-2026-46206                      CVE-2026-46208 CVE-2026-46209 CVE-2026-46212 CVE-2026-46214                      CVE-2026-46220 CVE-2026-46227 CVE-2026-46231 CVE-2026-46233                      CVE-2026-46234 CVE-2026-46236 CVE-2026-46238 CVE-2026-46275                      CVE-2026-46276 CVE-2026-46285 CVE-2026-46291 CVE-2026-46292                      CVE-2026-46294 CVE-2026-46299 CVE-2026-46301 CVE-2026-46303                      CVE-2026-46304 CVE-2026-46307 CVE-2026-46319 CVE-2026-46320                      CVE-2026-46321 CVE-2026-46322 CVE-2026-52909 CVE-2026-52910                      CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915                      CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919                      CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923                      CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927                      CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52934                      CVE-2026-52935 CVE-2026-52939 CVE-2026-52943 CVE-2026-52946                      CVE-2026-52947 CVE-2026-52948 CVE-2026-52954 CVE-2026-52955                      CVE-2026-52957 CVE-2026-52958 CVE-2026-52962 CVE-2026-52963                      CVE-2026-52970 CVE-2026-52972 CVE-2026-52982 CVE-2026-52984                      CVE-2026-52985 CVE-2026-52986 CVE-2026-52992 CVE-2026-52993                      CVE-2026-52995 CVE-2026-52998 CVE-2026-52999 CVE-2026-53001                      CVE-2026-53002 CVE-2026-53003 CVE-2026-53004 CVE-2026-53006                      CVE-2026-53011 CVE-2026-53012 CVE-2026-53016 CVE-2026-53021                      CVE-2026-53037 CVE-2026-53039 CVE-2026-53040 CVE-2026-53041                      CVE-2026-53043 CVE-2026-53045 CVE-2026-53047 CVE-2026-53050                      CVE-2026-53059 CVE-2026-53060 CVE-2026-53061 CVE-2026-53062                      CVE-2026-53064 CVE-2026-53065 CVE-2026-53068 CVE-2026-53071                      CVE-2026-53072 CVE-2026-53073 CVE-2026-53074 CVE-2026-53075                      CVE-2026-53077 CVE-2026-53080 CVE-2026-53082 CVE-2026-53088                      CVE-2026-53093 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130                      CVE-2026-53133 CVE-2026-53134 CVE-2026-53135 CVE-2026-53137                      CVE-2026-53146 CVE-2026-53148 CVE-2026-53149 CVE-2026-53150                      CVE-2026-53161 CVE-2026-53168 CVE-2026-53176 CVE-2026-53181                      CVE-2026-53186 CVE-2026-53189 CVE-2026-53194 CVE-2026-53195                      CVE-2026-53196 CVE-2026-53199 CVE-2026-53208 CVE-2026-53212                      CVE-2026-53217 CVE-2026-53218 CVE-2026-53219 CVE-2026-53221                      CVE-2026-53223 CVE-2026-53225 CVE-2026-53227 CVE-2026-53228                      CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245                      CVE-2026-53249 CVE-2026-53255 CVE-2026-53256 CVE-2026-53263                      CVE-2026-53264 CVE-2026-53266 CVE-2026-53268 CVE-2026-53269                      CVE-2026-53270 CVE-2026-53273 CVE-2026-53287 CVE-2026-53294                      CVE-2026-53295 CVE-2026-53296 CVE-2026-53304 CVE-2026-53309                      CVE-2026-53320 CVE-2026-53337 CVE-2026-53339 CVE-2026-53352                      CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357     Debian Bug     : 1130365 1119093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.259-1.  This version additionally includes many more bug fixes     from stable updates 5.10.258 and 5.10.259.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() rfcomm_get_sock_by_channel() scans     rfcomm_sk_list under the list lock, but returns the selected listener after dropping that lock without     taking a reference. rfcomm_connect_ind() then locks the listener, queues a child socket on it, and may     notify it after unlocking it. The buggy scenario involves two paths, with each column showing the order     within that path: rfcomm_connect_ind(): listener close: 1. Find parent in 1. close() enters     rfcomm_get_sock_by_channel() rfcomm_sock_release(). 2. Drop rfcomm_sk_list.lock 2. rfcomm_sock_shutdown()     without pinning parent. closes the listener. 3. Call lock_sock(parent) and 3. rfcomm_sock_kill()     bt_accept_enqueue(parent, unlinks and puts parent. sk, true). 4. Read parent flags and may 4. parent can     be freed. call sk_state_change(). If close wins the race, parent can be freed before rfcomm_connect_ind()     reaches lock_sock(), bt_accept_enqueue(), or the deferred-setup callback. Take a reference on the listener     before leaving rfcomm_sk_list.lock. After lock_sock() succeeds, recheck that it is still in BT_LISTEN     before queueing a child, cache the deferred-setup bit while the parent is locked, and drop the reference     after the last parent use. KASAN reported a slab-use-after-free in lock_sock_nested() from     rfcomm_connect_ind(), with the freeing stack going through rfcomm_sock_kill() and rfcomm_sock_release().
    (CVE-2026-53256)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
341639	SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:3809-1)	Nessus	SuSE Local Security Checks	Local	high
335101	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3595-1)	Nessus	SuSE Local Security Checks	Local	high
335098	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3593-1)	Nessus	SuSE Local Security Checks	Local	high
335089	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3594-1)	Nessus	SuSE Local Security Checks	Local	high
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
333941	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	Nessus	PhotonOS Local Security Checks	Local	high
332436	Photon OS 5.0: Linux PHSA-2026-5.0-91-0904	Nessus	PhotonOS Local Security Checks	Local	high
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	Local	high
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	Local	medium
328903	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3156-1)	Nessus	SuSE Local Security Checks	Local	high
326306	Photon OS 4.0: Linux PHSA-2026-4.0-1054	Nessus	PhotonOS Local Security Checks	Local	high
325283	Debian dla-4671 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	Local	high
325059	Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update	Nessus	Debian Local Security Checks	Local	high
325018	Debian dla-4664 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
323389	Photon OS 5.0: Linux PHSA-2026-5.0-0904	Nessus	PhotonOS Local Security Checks	Local	high
323299	Linux Distros Unpatched Vulnerability : CVE-2026-53256	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-53256

high

Tenable Plugins

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high