In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns "" everywhere except the fully-qualified VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL->"" guard. Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can reach the truncation path. Keep the length check but leave field_name as "" on overflow.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from     hist_field_name() on truncation hist_field_name() returns  everywhere except the fully-qualified     VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the     strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by     MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out     of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can     reach the truncation path. Keep the length check but leave field_name as  on overflow. (CVE-2026-64028)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376875	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4411)	Nessus	Huawei Local Security Checks	Local	high
376715	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4488)	Nessus	Huawei Local Security Checks	Local	high
364867	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4148)	Nessus	Huawei Local Security Checks	Local	high
364837	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4241)	Nessus	Huawei Local Security Checks	Local	high
364821	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4057)	Nessus	Huawei Local Security Checks	Local	high
364820	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)	Nessus	Huawei Local Security Checks	Local	high
328194	Linux Distros Unpatched Vulnerability : CVE-2026-64028	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-64028

medium

Tenable Plugins

high

high

high

high

high

high

medium