Detections
Analytics
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-3684)
high Nessus Plugin ID 347200
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)
USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)
ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)
tun: free page on build_skb failure in tun_xdp_one()(CVE-2026-46322)
tun: free page on short-frame rejection in tun_xdp_one()(CVE-2026-46321)
tap: free page on error paths in tap_get_user_xdp()(CVE-2026-46320)
net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)
ipmi: Add limits to event and receive message requests(CVE-2026-46177)
dm: fix a buffer overflow in ioctl processing(CVE-2026-46294)
xsk: tighten UMEM headroom validation to account for tailroom and min frame(CVE-2026-43093)
net: consume xmit errors of GSO frames(CVE-2026-43194)
procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46259)
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)
RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-46133)
drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()(CVE-2026-46209)
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-46227)
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path(CVE-2026-46189)
RDMA/rxe: Fix double free in rxe_srq_from_init(CVE-2026-45852)
RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send(CVE-2026-45856)
thermal: core: Fix thermal zone governor cleanup issues(CVE-2026-46021)
dm mirror: fix integer overflow in create_dirty_log()(CVE-2026-46023)
crypto: authencesn - reject short ahash digests during instance creation(CVE-2026-46033)
ceph: only d_add() negative dentries when they are unhashed(CVE-2026-46052)
openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-45840)
slip: bound decode() reads against the compressed packet length(CVE-2026-45843)
rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43499)
netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)
netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43190)
ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-43339)
xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-43139)
Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel packages.See Also
Plugin Details
Severity: High
ID: 347200
File Name: EulerOS_SA-2026-3684.nasl
Version: 1.1
Type: Local
Family: Huawei Local Security Checks
Published: 9/18/2026
Updated: 9/18/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.87
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-46294
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:bpftool, p-cpe:/a:huawei:euleros:kernel-abi-stablelists, p-cpe:/a:huawei:euleros:kernel-tools-libs-devel, p-cpe:/a:huawei:euleros:kernel-tools-libs, p-cpe:/a:huawei:euleros:kernel-tools, p-cpe:/a:huawei:euleros:kernel, p-cpe:/a:huawei:euleros:perf, p-cpe:/a:huawei:euleros:python3-perf
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/16/2026
Vulnerability Publication Date: 3/12/2026
Reference Information
CVE: CVE-2026-31662, CVE-2026-43093, CVE-2026-43139, CVE-2026-43158, CVE-2026-43190, CVE-2026-43194, CVE-2026-43339, CVE-2026-43450, CVE-2026-43452, CVE-2026-43499, CVE-2026-45840, CVE-2026-45843, CVE-2026-45852, CVE-2026-45856, CVE-2026-46021, CVE-2026-46023, CVE-2026-46033, CVE-2026-46052, CVE-2026-46133, CVE-2026-46177, CVE-2026-46189, CVE-2026-46209, CVE-2026-46227, CVE-2026-46259, CVE-2026-46294, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322, CVE-2026-46331, CVE-2026-52923, CVE-2026-53163, CVE-2026-53176, CVE-2026-53194