According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)

    IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)

    USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)

    ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)

    tun: free page on build_skb failure in tun_xdp_one()(CVE-2026-46322)

    tun: free page on short-frame rejection in tun_xdp_one()(CVE-2026-46321)

    tap: free page on error paths in tap_get_user_xdp()(CVE-2026-46320)

    net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)

    ipmi: Add limits to event and receive message requests(CVE-2026-46177)

    dm: fix a buffer overflow in ioctl processing(CVE-2026-46294)

    xsk: tighten UMEM headroom validation to account for tailroom and min frame(CVE-2026-43093)

    net: consume xmit errors of GSO frames(CVE-2026-43194)

    procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46259)

    tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)

    RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-46133)

    drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()(CVE-2026-46209)

    sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-46227)

    RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path(CVE-2026-46189)

    RDMA/rxe: Fix double free in rxe_srq_from_init(CVE-2026-45852)

    RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send(CVE-2026-45856)

    thermal: core: Fix thermal zone governor cleanup issues(CVE-2026-46021)

    dm mirror: fix integer overflow in create_dirty_log()(CVE-2026-46023)

    crypto: authencesn - reject short ahash digests during instance creation(CVE-2026-46033)

    ceph: only d_add() negative dentries when they are unhashed(CVE-2026-46052)

    openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-45840)

    slip: bound decode() reads against the compressed packet length(CVE-2026-45843)

    rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43499)

    netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

    netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43190)

    ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-43339)

    xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-43139)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-3684)

high Nessus Plugin ID 347200

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 23, 2026, 8:20 AM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202609230820
Version 1.2 Sep 21, 2026, 3:50 PM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202609211550
Version 1.1 Sep 18, 2026, 2:17 PM New Plugin Feed: 202609181417