In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize while holding sl->lock. slip_receive_buf() reads those fields and writes through rbuff without holding the lock. An MTU change can therefore race with receive processing. An MTU shrink can expose the new smaller rbuff with the old larger bound, causing an out-of-bounds write. A receive callback which already loaded the old rbuff can instead continue writing after that buffer has been freed. Serialize receive processing with sl_realloc_bufs() by holding sl->lock while consuming each receive batch.

The version of kernel installed on the remote host is prior to 5.10.265-265.1078. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-130 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    tls: separate no-async decryption request handling from async (CVE-2024-58240)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: Fix race condition in AF_XDP generic RX path (CVE-2025-37920)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix ld_{abs,ind} failure path analysis in subprogs (CVE-2026-53090)

    In the Linux kernel, the following vulnerability has been resolved:

    nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (CVE-2026-64543)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nVMX: Hide shadow VMCS right after VMCLEAR (CVE-2026-64562)

    In the Linux kernel, the following vulnerability has been resolved:

    rhashtable: clear stale iter->p on table restart (CVE-2026-64563)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: reject free space cache with more entries than pages (CVE-2026-64567)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (CVE-2026-64579)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (CVE-2026-64581)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)

    In the Linux kernel, the following vulnerability has been resolved:

    pppoe: reload header pointer after dev_hard_header() (CVE-2026-68121)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: reload IPv6 header after pskb_may_pull in checksum adjust (CVE-2026-68127)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: Reset positive result codes to zero in object map update path (CVE-2026-68131)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: serialize qdisc_rtab_list against concurrent get/put (CVE-2026-68138)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68142)

    In the Linux kernel, the following vulnerability has been resolved:

    net: slip: serialize receive against buffer reallocation (CVE-2026-68143)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: remove debugfs files before client teardown (CVE-2026-68153)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: reject zero bucket types in crush_decode (CVE-2026-68154)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Reject monmaps advertising zero monitors (CVE-2026-68155)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: guard missing CRUSH type name lookup (CVE-2026-68157)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix multiplication overflow in decode_new_up_state_weight() (CVE-2026-68158)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (CVE-2026-68160)

    In the Linux kernel, the following vulnerability has been resolved:

    cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (CVE-2026-68184)

    In the Linux kernel, the following vulnerability has been resolved:

    binfmt_misc: set have_execfd only once the interpreter is opened (CVE-2026-68186)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (CVE-2026-68284)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix u16 MTU truncation in media and bearer MTU validation (CVE-2026-68297)

    In the Linux kernel, the following vulnerability has been resolved:

    vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix infinite loop in __tipc_nl_compat_dumpit (CVE-2026-68313)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (CVE-2026-68320)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (CVE-2026-68322)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: Bound the early ACPI HID map (CVE-2026-68325)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: drop incoming messages that cross network namespace boundaries (CVE-2026-68335)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: io_edgeport: cap received transmit credits (CVE-2026-68365)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_tunnel_key: Defer dst_release to RCU callback (CVE-2026-68377)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (CVE-2026-68398)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix UAF in sock clone early bailouts (CVE-2026-68399)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/mad: Drop unmatched RMPP responses before reassembly (CVE-2026-68425)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86/mmu: Fix use-after-free on vendor module reload (CVE-2026-68428)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: bound get_version reply decode to front len (CVE-2026-68433)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/bugs: Make Safe-RET robust against interrupt injection (CVE-2026-68480)

    In the Linux kernel, the following vulnerability has been resolved:

    macsec: don't read an unset MAC header in macsec_encrypt() (CVE-2026-72019)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72051)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipip: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72053)

    In the Linux kernel, the following vulnerability has been resolved:

    cpu: hotplug: Bound hotplug states sysfs output (CVE-2026-72066)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add missing device refcount for CAN filter removal (CVE-2026-72113)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: validate frame length in bcm_rx_setup() for RTR replies (CVE-2026-72114)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: track a single source interface for ANYDEV timeout/throttle ops (CVE-2026-72115)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix stale rx/tx ops after device removal (CVE-2026-72116)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() (CVE-2026-72117)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix CAN frame rx/tx statistics (CVE-2026-72118)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: extend bcm_tx_lock usage for data and timer updates (CVE-2026-72119)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add locking when updating filter and timer values (CVE-2026-72121)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CVE-2026-72123)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (CVE-2026-72392)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: reject inverted service ranges from peer bindings (CVE-2026-74281)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix skb leak on flow key update failure during ct (CVE-2026-74464)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix potential UAF on meter attach failure (CVE-2026-74465)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: prevent peer transport count overflow (CVE-2026-74469)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Check return value of __register_event() in trace_module_add_events() (CVE-2026-74471)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: use pskb_network_may_pull() in route_shortcircuit() (CVE-2026-74473)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: use neigh_ha_snapshot() in route_shortcircuit() (CVE-2026-74475)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/page_reporting: use system_freezable_wq to fix UAF during suspend (CVE-2026-74481)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (CVE-2026-74482)

    In the Linux kernel, the following vulnerability has been resolved:

    binfmt_misc: reject a flag character as the field delimiter (CVE-2026-74485)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: avoid use-after-free in poll trace queue dumps (CVE-2026-74490)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: do not update comments from kernel-side hash adds (CVE-2026-74492)

    In the Linux kernel, the following vulnerability has been resolved:

    igbvf: Fix leak in TX DMA error cleanup (CVE-2026-74495)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: fix potential use-after-free in audit_del_rule() (CVE-2026-74512)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

    In the Linux kernel, the following vulnerability has been resolved:

    pinctrl: devicetree: don't free uninitialized dev_name on error path (CVE-2026-74519)

    In the Linux kernel, the following vulnerability has been resolved:

    qede: sync udp_tunnel ports outside qede_lock in the recovery path (CVE-2026-74523)

    In the Linux kernel, the following vulnerability has been resolved:

    hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (CVE-2026-74547)

    In the Linux kernel, the following vulnerability has been resolved:

    hwmon: (nct6775-core) Prevent access to unsupported weight registers (CVE-2026-74549)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (CVE-2026-74557)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (CVE-2026-74563)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (CVE-2026-74564)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: make keyring key-chunk byte order agree with keyring_diff_objects() (CVE-2026-74566)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: fix out-of-bounds read in keyring_get_key_chunk() (CVE-2026-74567)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)

    In the Linux kernel, the following vulnerability has been resolved:

    net: mpls: initialize rtm_tos in mpls_getroute() (CVE-2026-74577)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_payload: fix mask build for partial field offload (CVE-2026-74579)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost: reset the vring metadata cache on vring reconfiguration (CVE-2026-74580)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: bridge: release template ct on non-IP path (CVE-2026-74625)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4745 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4745-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     August 18, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.12     Version        : 6.12.101-1~deb12u1     CVE ID         : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078                      CVE-2026-53090 CVE-2026-64205 CVE-2026-64280 CVE-2026-64290                      CVE-2026-64561 CVE-2026-64562 CVE-2026-64563 CVE-2026-64564                      CVE-2026-64565 CVE-2026-64567 CVE-2026-64568 CVE-2026-64569                      CVE-2026-64570 CVE-2026-64571 CVE-2026-64572 CVE-2026-64573                      CVE-2026-64574 CVE-2026-64576 CVE-2026-64577 CVE-2026-64578                      CVE-2026-64579 CVE-2026-64580 CVE-2026-64583 CVE-2026-64584                      CVE-2026-68093 CVE-2026-68096 CVE-2026-68097 CVE-2026-68098                      CVE-2026-68099 CVE-2026-68100 CVE-2026-68102 CVE-2026-68104                      CVE-2026-68106 CVE-2026-68107 CVE-2026-68108 CVE-2026-68110                      CVE-2026-68111 CVE-2026-68112 CVE-2026-68113 CVE-2026-68115                      CVE-2026-68116 CVE-2026-68117 CVE-2026-68119 CVE-2026-68120                      CVE-2026-68121 CVE-2026-68123 CVE-2026-68124 CVE-2026-68125                      CVE-2026-68126 CVE-2026-68127 CVE-2026-68128 CVE-2026-68129                      CVE-2026-68130 CVE-2026-68131 CVE-2026-68133 CVE-2026-68135                      CVE-2026-68136 CVE-2026-68137 CVE-2026-68139 CVE-2026-68140                      CVE-2026-68141 CVE-2026-68142 CVE-2026-68143 CVE-2026-68144                      CVE-2026-68145 CVE-2026-68146 CVE-2026-68147 CVE-2026-68148                      CVE-2026-68149 CVE-2026-68151 CVE-2026-68152 CVE-2026-68153                      CVE-2026-68154 CVE-2026-68155 CVE-2026-68156 CVE-2026-68157                      CVE-2026-68158 CVE-2026-68160 CVE-2026-68161 CVE-2026-68162                      CVE-2026-68164 CVE-2026-68165 CVE-2026-68175 CVE-2026-68176                      CVE-2026-68178 CVE-2026-68179 CVE-2026-68180 CVE-2026-68181                      CVE-2026-68182 CVE-2026-68183 CVE-2026-68184 CVE-2026-68185                      CVE-2026-68186 CVE-2026-68187 CVE-2026-68188 CVE-2026-68189                      CVE-2026-68190 CVE-2026-68192 CVE-2026-68193 CVE-2026-68194                      CVE-2026-68195 CVE-2026-68196 CVE-2026-68197 CVE-2026-68199                      CVE-2026-68200 CVE-2026-68201 CVE-2026-68202 CVE-2026-68203                      CVE-2026-68204 CVE-2026-68205 CVE-2026-68206 CVE-2026-68207                      CVE-2026-68209 CVE-2026-68210 CVE-2026-68212 CVE-2026-68213                      CVE-2026-68214 CVE-2026-68215 CVE-2026-68216 CVE-2026-68217                      CVE-2026-68218 CVE-2026-68219 CVE-2026-68220 CVE-2026-68221                      CVE-2026-68222 CVE-2026-68223 CVE-2026-68225 CVE-2026-68226                      CVE-2026-68227 CVE-2026-68228 CVE-2026-68229 CVE-2026-68231                      CVE-2026-68234 CVE-2026-68235 CVE-2026-68236 CVE-2026-68243                      CVE-2026-68244 CVE-2026-68245 CVE-2026-68246 CVE-2026-68247                      CVE-2026-68248 CVE-2026-68249 CVE-2026-68250 CVE-2026-68251                      CVE-2026-68252 CVE-2026-68255 CVE-2026-68256 CVE-2026-68257                      CVE-2026-68259 CVE-2026-68260 CVE-2026-68261 CVE-2026-68262                      CVE-2026-68263 CVE-2026-68269 CVE-2026-68271 CVE-2026-68272                      CVE-2026-68277 CVE-2026-68278 CVE-2026-68279 CVE-2026-68280                      CVE-2026-68281 CVE-2026-68284 CVE-2026-68290 CVE-2026-68293                      CVE-2026-68294 CVE-2026-68296 CVE-2026-68297 CVE-2026-68299                      CVE-2026-68300 CVE-2026-68301 CVE-2026-68302 CVE-2026-68304                      CVE-2026-68306 CVE-2026-68307 CVE-2026-68308 CVE-2026-68309                      CVE-2026-68310 CVE-2026-68311 CVE-2026-68313 CVE-2026-68314                      CVE-2026-68315 CVE-2026-68317 CVE-2026-68318 CVE-2026-68319                      CVE-2026-68320 CVE-2026-68321 CVE-2026-68324 CVE-2026-68325                      CVE-2026-68326 CVE-2026-68327 CVE-2026-68328 CVE-2026-68329                      CVE-2026-68331 CVE-2026-68333 CVE-2026-68335 CVE-2026-68336                      CVE-2026-68338 CVE-2026-68339 CVE-2026-68340 CVE-2026-68343                      CVE-2026-68344 CVE-2026-68346 CVE-2026-68348 CVE-2026-68349                      CVE-2026-68350 CVE-2026-68351 CVE-2026-68352 CVE-2026-68353                      CVE-2026-68354 CVE-2026-68355 CVE-2026-68357 CVE-2026-68358                      CVE-2026-68359 CVE-2026-68360 CVE-2026-68361 CVE-2026-68362                      CVE-2026-68363 CVE-2026-68365 CVE-2026-68366 CVE-2026-68368                      CVE-2026-68369 CVE-2026-68370 CVE-2026-68371 CVE-2026-68372                      CVE-2026-68373 CVE-2026-68374 CVE-2026-68376 CVE-2026-68377                      CVE-2026-68381 CVE-2026-68385 CVE-2026-68386 CVE-2026-68388                      CVE-2026-68389 CVE-2026-68391 CVE-2026-68392 CVE-2026-68394                      CVE-2026-68395 CVE-2026-68396 CVE-2026-68397 CVE-2026-68398                      CVE-2026-68402 CVE-2026-68403 CVE-2026-68405 CVE-2026-68406                      CVE-2026-68407 CVE-2026-68408 CVE-2026-68410 CVE-2026-68411                      CVE-2026-68413 CVE-2026-68414 CVE-2026-68416 CVE-2026-68417                      CVE-2026-68419 CVE-2026-68422 CVE-2026-68425 CVE-2026-68427                      CVE-2026-68428 CVE-2026-68429 CVE-2026-68430 CVE-2026-68432                      CVE-2026-68433 CVE-2026-68434 CVE-2026-68437 CVE-2026-68439                      CVE-2026-68442 CVE-2026-68443 CVE-2026-68444 CVE-2026-68445                      CVE-2026-68446 CVE-2026-68449 CVE-2026-68450 CVE-2026-72015                      CVE-2026-72017 CVE-2026-72023 CVE-2026-72030 CVE-2026-72032                      CVE-2026-72040 CVE-2026-72045 CVE-2026-72046 CVE-2026-72051                      CVE-2026-72062 CVE-2026-72065 CVE-2026-72069 CVE-2026-72070                      CVE-2026-72101 CVE-2026-72103 CVE-2026-72113 CVE-2026-72114                      CVE-2026-72115 CVE-2026-72116 CVE-2026-72117 CVE-2026-72118                      CVE-2026-72119 CVE-2026-72121 CVE-2026-72124 CVE-2026-72125                      CVE-2026-72130 CVE-2026-72137 CVE-2026-72142 CVE-2026-72146                      CVE-2026-72147 CVE-2026-72168 CVE-2026-72175 CVE-2026-72183                      CVE-2026-72213 CVE-2026-72244 CVE-2026-72253 CVE-2026-72254                      CVE-2026-72260 CVE-2026-72299 CVE-2026-72305 CVE-2026-72372                      CVE-2026-74436     Debian Bug     : 1143721

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.  This update additionally includes many more bug fixes from     stable update 6.12.101.

    For Debian 12 bookworm, these problems have been fixed in version     6.12.101-1~deb12u1.

    We recommend that you upgrade your linux-6.12 packages.

    For the detailed security status of linux-6.12 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.12

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates     buffsize while holding sl->lock. slip_receive_buf() reads those fields and writes through rbuff without     holding the lock. An MTU change can therefore race with receive processing. An MTU shrink can expose the     new smaller rbuff with the old larger bound, causing an out-of-bounds write. A receive callback which     already loaded the old rbuff can instead continue writing after that buffer has been freed. Serialize     receive processing with sl_realloc_bufs() by holding sl->lock while consuming each receive batch.
    (CVE-2026-68143)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
341859	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-130 (ALASKERNEL-5.10-2026-130)	Nessus	Amazon Linux Local Security Checks	Local	high
337079	Debian dla-4745 : ata-modules-6.12.100+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	medium
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	Local	medium
334204	Linux Distros Unpatched Vulnerability : CVE-2026-68143	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-68143

high

Tenable Plugins

high

medium

medium

high