Detections
Analytics

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2026-3835)

high Nessus Plugin ID 348500

Synopsis

The remote EulerOS Virtualization host is missing multiple security updates.

Description

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

 locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)

 ppp: require CAP_NET_ADMIN in target netns for unattached ioctls(CVE-2026-53075)

 RDMA/umem: Fix truncation for block sizes = 4G(CVE-2026-53133)

 USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)

 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)

 ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)

 net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)

 (CVE-2026-43047)

 HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

 dm: fix a buffer overflow in ioctl processing(CVE-2026-46294)

 bonding: alb: fix UAF in rlb_arp_recv during bond up/down(CVE-2026-45970)

 RDMA/rxe: Fix double free in rxe_srq_from_init(CVE-2026-45852)

 netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43028)

 procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46259)

 netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

 net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-23340)

 openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-45840)

 ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-43339)

 netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43190)

 RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-46133)

 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-46227)

 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv(CVE-2026-46043)

 slip: bound decode() reads against the compressed packet length(CVE-2026-45843)

 drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()(CVE-2026-46209)

 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery(CVE-2026-43466)

 net: consume xmit errors of GSO frames(CVE-2026-43194)

 crypto: authencesn - reject short ahash digests during instance creation(CVE-2026-46033)

 lib/crypto: chacha: Zeroize permuted_state before it leaves scope(CVE-2026-43336)

 dm mirror: fix integer overflow in create_dirty_log()(CVE-2026-46023)

 ceph: only d_add() negative dentries when they are unhashed(CVE-2026-46052)

 usb: class: cdc-wdm: fix reordering issue in read code path(CVE-2026-43427)

 thermal: core: Fix thermal zone governor cleanup issues(CVE-2026-46021)

 (CVE-2026-46006)

 (CVE-2026-43060)

 xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-43139)

 netfilter: nf_conntrack_h323: fix OOB read in decode_choice()(CVE-2026-43233)

 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()(CVE-2026-43450)

 netfilter: x_tables: guard option walkers against 1-byte tail reads(CVE-2026-43452)

 ipv6: icmp: clear skb2-cb[] in ip6_err_gen_icmpv6_unreach()(CVE-2026-43038)

 ip6_tunnel: clear skb2-cb[] in ip4ip6_err()(CVE-2026-43037)

 net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode(CVE-2026-43180)

 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path(CVE-2026-43328)

 rtmutex: Use waiter::task instead of current in remove_waiter()(CVE-2026-43499)

 crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

 PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

 xfs: fix freemap adjustments when adding xattrs to leaf blocks(CVE-2026-43158)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected kernel packages.

See Also

http://www.nessus.org/u?84d6130c

Plugin Details

Severity: High

ID: 348500

File Name: EulerOS_SA-2026-3835.nasl

Version: 1.1

Type: Local

Published: 9/21/2026

Updated: 9/21/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.5

Percentile: 99.87

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-46294

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:huawei:euleros:uvp:2.10.1, p-cpe:/a:huawei:euleros:bpftool, p-cpe:/a:huawei:euleros:kernel-abi-stablelists, p-cpe:/a:huawei:euleros:kernel-tools-libs-devel, p-cpe:/a:huawei:euleros:kernel-tools-libs, p-cpe:/a:huawei:euleros:kernel-tools, p-cpe:/a:huawei:euleros:kernel, p-cpe:/a:huawei:euleros:perf, p-cpe:/a:huawei:euleros:python3-perf

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/uvp_version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/21/2026

Vulnerability Publication Date: 3/12/2026

Reference Information

CVE: CVE-2026-23340, CVE-2026-43027, CVE-2026-43028, CVE-2026-43037, CVE-2026-43038, CVE-2026-43047, CVE-2026-43048, CVE-2026-43060, CVE-2026-43139, CVE-2026-43158, CVE-2026-43180, CVE-2026-43190, CVE-2026-43194, CVE-2026-43211, CVE-2026-43233, CVE-2026-43328, CVE-2026-43336, CVE-2026-43339, CVE-2026-43427, CVE-2026-43450, CVE-2026-43452, CVE-2026-43466, CVE-2026-43493, CVE-2026-43499, CVE-2026-45840, CVE-2026-45843, CVE-2026-45852, CVE-2026-45970, CVE-2026-46006, CVE-2026-46021, CVE-2026-46023, CVE-2026-46033, CVE-2026-46043, CVE-2026-46052, CVE-2026-46133, CVE-2026-46209, CVE-2026-46227, CVE-2026-46259, CVE-2026-46294, CVE-2026-46331, CVE-2026-52923, CVE-2026-53075, CVE-2026-53133, CVE-2026-53163, CVE-2026-53176, CVE-2026-53194