The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6258 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6258-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 09, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2026-43284 CVE-2026-43500     Debian Bug     : 1135514

    Two vulnerabilities have been discovered in the Linux kernel that may     lead to local privilege escalation.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.170-3.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-6258 : affs-modules-6.1.0-44-4kc-malta-di - security update

high Nessus Plugin ID 313513

Version 1.8

Version 1.7

Version 1.6

Version 1.3

Version 1.2

Version 1.1

Version 1.8 May 26, 2026, 12:31 PM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202605261231
Version 1.7 May 16, 2026, 9:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605162113
Version 1.6 May 16, 2026, 9:07 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605160907
Version 1.3 May 12, 2026, 8:32 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2026-43284" to "CVE-2026-43500") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202605120832
Version 1.2 May 9, 2026, 8:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605092013
Version 1.1 May 9, 2026, 2:03 PM New Plugin Feed: 202605091403