Detections
Analytics
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-3744)
high Nessus Plugin ID 348044
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)
RDMA/umem: Fix truncation for block sizes = 4G(CVE-2026-53075)
USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53133)
ipc: limit next_id allocation to the valid ID range(CVE-2026-53194)
HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-53176)
dm: fix a buffer overflow in ioctl processing(CVE-2026-52923)
bonding: alb: fix UAF in rlb_arp_recv during bond up/down(CVE-2026-46331)
RDMA/rxe: Fix double free in rxe_srq_from_init(CVE-2026-43047)
netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43048)
procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46294)
netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-45970)
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-45852)
openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-43028)
ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-46259)
netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43027)
RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-23340)
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-45840)
RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv(CVE-2026-43339)
slip: bound decode() reads against the compressed packet length(CVE-2026-43190)
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery(CVE-2026-46133)
net: consume xmit errors of GSO frames(CVE-2026-46227)
crypto: authencesn - reject short ahash digests during instance creation(CVE-2026-46043)
lib/crypto: chacha: Zeroize permuted_state before it leaves scope(CVE-2026-45843)
dm mirror: fix integer overflow in create_dirty_log()(CVE-2026-46209)
ceph: only d_add() negative dentries when they are unhashed(CVE-2026-43466)
usb: class: cdc-wdm: fix reordering issue in read code path(CVE-2026-43194)
thermal: core: Fix thermal zone governor cleanup issues(CVE-2026-46033)
netfilter: nft_ct: drop pending enqueued packets on removal(CVE-2026-43336)
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-46023)
netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-46052)
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43427)
netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-46021)
net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-46006)
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path(CVE-2026-43060)
rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43139)
crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43233)
PCI: Fix pci_slot_trylock() error handling(CVE-2026-43450)
netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)
ipv6: icmp: clear skb2-cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)
ip6_tunnel: clear skb2-cb[] in ip4ip6_err()(CVE-2026-43037)
net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-43180)
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path(CVE-2026-43328)
rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43499)
crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)
PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)
xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)
Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel packages.See Also
Plugin Details
Severity: High
ID: 348044
File Name: EulerOS_SA-2026-3744.nasl
Version: 1.1
Type: Local
Family: Huawei Local Security Checks
Published: 9/18/2026
Updated: 9/18/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
Percentile: 99.87
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-46294
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:bpftool, p-cpe:/a:huawei:euleros:kernel-abi-stablelists, p-cpe:/a:huawei:euleros:kernel-tools-libs-devel, p-cpe:/a:huawei:euleros:kernel-tools-libs, p-cpe:/a:huawei:euleros:kernel-tools, p-cpe:/a:huawei:euleros:kernel, p-cpe:/a:huawei:euleros:perf, p-cpe:/a:huawei:euleros:python3-perf
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/16/2026
Vulnerability Publication Date: 3/12/2026
Reference Information
CVE: CVE-2026-23340, CVE-2026-43027, CVE-2026-43028, CVE-2026-43037, CVE-2026-43038, CVE-2026-43047, CVE-2026-43048, CVE-2026-43060, CVE-2026-43139, CVE-2026-43158, CVE-2026-43180, CVE-2026-43190, CVE-2026-43194, CVE-2026-43211, CVE-2026-43233, CVE-2026-43328, CVE-2026-43336, CVE-2026-43339, CVE-2026-43427, CVE-2026-43450, CVE-2026-43452, CVE-2026-43466, CVE-2026-43493, CVE-2026-43499, CVE-2026-45840, CVE-2026-45843, CVE-2026-45852, CVE-2026-45970, CVE-2026-46006, CVE-2026-46021, CVE-2026-46023, CVE-2026-46033, CVE-2026-46043, CVE-2026-46052, CVE-2026-46133, CVE-2026-46209, CVE-2026-46227, CVE-2026-46259, CVE-2026-46294, CVE-2026-46331, CVE-2026-52923, CVE-2026-53075, CVE-2026-53133, CVE-2026-53163, CVE-2026-53176, CVE-2026-53194