It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1881 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: handle attr_set_size() errors when truncating files (CVE-2025-71289)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/waitid: clear waitid info before copying it to userspace (CVE-2026-46315)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317)

    In the Linux kernel, the following vulnerability has been resolved:

    tun: free page on short-frame rejection in tun_xdp_one() (CVE-2026-46321)

    In the Linux kernel, the following vulnerability has been resolved:

    tun: free page on build_skb failure in tun_xdp_one() (CVE-2026-46322)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ip6t_hbh: reject oversized option lists (CVE-2026-52915)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: stop hash:* range iteration at end (CVE-2026-52921)

    In the Linux kernel, the following vulnerability has been resolved:

    ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: ipcomp: Free destination pages on acomp errors (CVE-2026-52932)

    In the Linux kernel, the following vulnerability has been resolved:

    tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR (CVE-2026-52937)

    In the Linux kernel, the following vulnerability has been resolved:

    net: skbuff: fix missing zerocopy reference in pskb_carve helpers (CVE-2026-52943)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CVE-2026-53277)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: fix uninit-value in fuse_dentry_revalidate() (CVE-2026-53311)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1881)

medium Nessus Plugin ID 322087

Version 1.4