Detections
Analytics
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4057)
high Nessus Plugin ID 364821
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :i2c: stub: Reject I2C block transfers with invalid length(CVE-2026-64191)
USB: serial: mct_u232: fix memory corruption with small endpoint(CVE-2026-63898)
qed: fix double free in qed_cxt_tables_alloc()(CVE-2026-64118)
apparmor: mediate the implicit connect of TCP fast open sendmsg(CVE-2026-63828)
regulator: core: fix locking in regulator_resolve_supply() error path(CVE-2026-46252)
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()(CVE-2026-53221)
crypto: jitterentropy - replace long-held spinlock with mutex(CVE-2026-52936)
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free(CVE-2026-46304)
usb: usbtmc: check URB actual_length for interrupt-IN notifications(CVE-2026-63904)
sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing(CVE-2026-53246)
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72055)
netfilter: ebtables: zero chainstack array(CVE-2026-64413)
net/sched: netem: fix queue limit check to include reordered packets(CVE-2026-52984)
fbdev: fix use-after-free in store_modes()(CVE-2026-63826)
crypto: ecc - Fix carry overflow in vli multiplication(CVE-2026-64313)
parport: Fix race between port and client registration(CVE-2026-63942)
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()(CVE-2026-64351)
netpoll: fix a use-after-free on shutdown path(CVE-2026-64424)
bpf: sockmap: fix tail fragment offset in bpf_msg_push_data(CVE-2026-63926)
net: bonding: fix NULL pointer dereference in bond_do_ioctl()(CVE-2026-53337)
NFSv4/flexfiles: reject zero filehandle version count(CVE-2026-53392)
after commit 0460253913e5 ('NFSv4: nfs4_do_open() is incorrectly triggering(CVE-2026-72472)
udf: validate VAT header length against the VAT inode size(CVE-2026-64323)
thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()(CVE-2026-63891)
netfilter: nft_ct: fix missing expect put in obj eval(CVE-2026-52970)
ARM: integrator: Fix early initialization(CVE-2026-64165)
netfilter: synproxy: add mutex to guard hook reference counting(CVE-2026-53269)
udf: reject descriptors with oversized CRC length(CVE-2026-53369)
libceph: remove debugfs files before client teardown(CVE-2026-68153)
fuse: re-lock request before replacing page cache folio(CVE-2026-53388)
smb: client: fix overflow in passthrough ioctl bounds check(CVE-2026-72310)
usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers(CVE-2026-63963)
netfilter: ipset: fix race between dump and ip_set_list resize(CVE-2026-64189)
erofs: unify lcn as u64 for 32-bit platforms(CVE-2026-53015)
usb: xhci: Fix sleep in atomic context in xhci_free_streams()(CVE-2026-64465)
dm cache metadata: fix memory leak on metadata abort retry(CVE-2026-53060)
USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)
tipc: fix double-free in tipc_buf_append()(CVE-2026-52993)
MIPS: DEC: Prevent initial console buffer from landing in XKPHYS(CVE-2026-64252)
nfsd: fix posix_acl leak on SETACL decode failure(CVE-2026-53397)
USB: serial: digi_acceleport: fix broken rx after throttle(CVE-2026-64335)
ACPI: CPPC: Suppress UBSAN warning caused by field misuse(CVE-2026-64512)
nfsd: release layout stid on setlease failure(CVE-2026-53399)
virtiofs: fix UAF on submount umount(CVE-2026-53381)
net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()(CVE-2026-52982)
crypto: qat - protect service table iterations with service_lock(CVE-2026-64305)
netfilter: nf_tables: fix dst corruption in same register operation(CVE-2026-64006)
tun: free page on build_skb failure in tun_xdp_one()(CVE-2026-46322)
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes(CVE-2026-64422)
Input: elan_i2c - validate firmware size before use(CVE-2026-64237)
fs/mbcache: cancel shrink work before destroying the cache(CVE-2026-53129)
bonding: 3ad: implement proper RCU rules for port-aggregator(CVE-2026-52975)
scsi: target: core: Fix integer overflow in UNMAP bounds check(CVE-2026-53021)
netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check(CVE-2026-63913)
fuse: re-lock request before returning from fuse_ref_folio()(CVE-2026-64266)
USB: serial: safe_serial: fix memory corruption with small endpoint(CVE-2026-63957)
vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write(CVE-2026-53385)
bnxt_en: Fix NULL pointer dereference(CVE-2026-53177)
netfilter: ebtables: module names must be null-terminated(CVE-2026-64412)
tracing: Bound synthetic-field strings with seq_buf(CVE-2026-74391)
pppoe: drop PFC frames(CVE-2026-53003)
tipc: fix out-of-bounds read in broadcast Gap ACK blocks(CVE-2026-64450)
ip6_vti: set netns_immutable on the fallback device.(CVE-2026-52909)
HID: usbhid: fix deadlock in hid_post_reset()(CVE-2026-53037)
libceph: Fix potential out-of-bounds access in osdmap_decode()(CVE-2026-52958)
keys: Pin request_key_auth payload in instantiate paths(CVE-2026-63823)
KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits(CVE-2026-64106)
drm/amd/display: Bound VBIOS record-chain walk loops(CVE-2026-53138)
netfilter: ipset: stop hash:* range iteration at end(CVE-2026-52921)
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()(CVE-2026-64540)
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb(CVE-2026-53074)
xfs: resample the data fork mapping after cycling ILOCK(CVE-2026-64600)
userfaultfd: gate must_wait writability check on pte_present()(CVE-2026-64514)
netfilter: conntrack_irc: fix possible out-of-bounds read(CVE-2026-53268)
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list(CVE-2026-53230)
erofs: fix metabuf leak in inode xattr initialization(CVE-2026-64146)
KVM: x86: Unconditionally recompute CR8 intercept on PPR update(CVE-2026-64513)
net: garp: fix unsigned integer underflow in garp_pdu_parse_attr(CVE-2026-63868)
tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()(CVE-2026-63992)
padata: Put CPU offline callback in ONLINE section to allow failure(CVE-2026-53314)
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()(CVE-2026-64438)
scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()(CVE-2026-63888)
bonding: refuse to enslave CAN devices(CVE-2026-63990)
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()(CVE-2026-63994)
scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf(CVE-2026-63887)
net: af_key: initialize alg_key_len for IPComp states(CVE-2026-64436)
RDMA/rxe: Fix a use-after-free problem in rxe_mmap(CVE-2026-64582)
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().(CVE-2026-64538)
USB: serial: keyspan: fix missing indat transfer sanity check(CVE-2026-63900)
ipv6: fix possible UAF in icmpv6_rcv()(CVE-2026-53006)
HID: lg-g15: cancel pending work on remove to fix a use-after-free(CVE-2026-64362)
smb: client: mask server-provided mode to 07777 in modefromsid(CVE-2026-64379)
net: skbuff: fix missing zerocopy reference in pskb_carve helpers(CVE-2026-52943)
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC(CVE-2026-64298)
net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)
bonding: fix type confusion in bond_setup_by_slave()(CVE-2026-43456)
IB/mad: Drop unmatched RMPP responses before reassembly(CVE-2026-68425)
USB: serial: digi_acceleport: fix hard lockup on disconnect(CVE-2026-64334)
USB: ulpi: fix memory leak on registration failure(CVE-2026-64332)
net/mlx5e: xsk: Fix unlocked writing to ICOSQ(CVE-2026-64210)
xfrm: esp: restore combined single-frag length gate(CVE-2026-63912)
smb/client: fix chown/chgrp with SMB3 POSIX Extensions(CVE-2026-64388)
netfilter: revalidate bridge ports(CVE-2026-53220)
iio: event: Fix event FIFO reset race(CVE-2026-64496)
xfrm: input: hold netns during deferred transport reinjection(CVE-2026-63919)
bpf: Fix RCU stall in bpf_fd_array_map_clear()(CVE-2026-53083)
cifs: validate DFS referral string offsets(CVE-2026-72318)
sctp: stream: fully roll back denied add-stream state(CVE-2026-52929)
selinux: allow multiple opens of /sys/fs/selinux/policy(CVE-2026-46302)
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr(CVE-2026-53245)
tcp: restrict SO_ATTACH_FILTER to priv users(CVE-2026-53236)
ipv6: mcast: Fix use-after-free when processing MLD queries(CVE-2026-53275)
spi: qup: fix error pointer deref after DMA setup failure(CVE-2026-64170)
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops(CVE-2026-53078)
apparmor: fix use-after-free in rawdata dedup loop(CVE-2026-63827)
openvswitch: vport: fix self-deadlock on release of tunnel ports(CVE-2026-46165)
sctp: fix race between sctp_wait_for_connect and peeloff(CVE-2026-63971)
netfilter: bridge: make ebt_snat ARP rewrite writable(CVE-2026-53266)
thunderbolt: Reject zero-length property entries in validator(CVE-2026-53150)
ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()(CVE-2026-63924)
tipc: require net admin for TIPCv2 netlink mutators(CVE-2026-74283)
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()(CVE-2026-64543)
sctp: diag: reject stale associations in dump_one path(CVE-2026-52917)
sctp: validate STALE_COOKIE cause length before reading staleness(CVE-2026-64551)
dm cache: fix write hang in passthrough mode(CVE-2026-53063)
ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)
bpf: Fix OOB in pcpu_init_value(CVE-2026-53076)
netfilter: synproxy: refresh tcphdr after skb_ensure_writable(CVE-2026-64007)
block: Avoid mounting the bdev pseudo-filesystem in userspace(CVE-2026-63810)
USB: idmouse: fix use-after-free on disconnect race(CVE-2026-64344)
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR(CVE-2026-52937)
ipv6: fix possible infinite loop in rt6_fill_node()(CVE-2026-63969)
xfs: fail recovery on a committed log item with no regions(CVE-2026-64187)
netfilter: conntrack: remove sprintf usage(CVE-2026-53002)
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP(CVE-2026-46266)
net: skmsg: preserve sg.copy across SG transforms(CVE-2026-63830)
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase(CVE-2026-52988)
ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()(CVE-2026-63984)
dm log: fix out-of-bounds write due to region_count overflow(CVE-2026-53059)
hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf(CVE-2026-53199)
drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()(CVE-2026-53330)
sched/psi: fix race between file release and pressure write(CVE-2026-52991)
smb: client: restrict implied bcc[0] exemption to responses without data area(CVE-2026-64448)
fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios(CVE-2026-53167)
i2c: core: fix adapter registration race(CVE-2026-53400)
libceph: handle rbtree insertion error in decode_choose_args()(CVE-2026-52954)
io_uring/poll: fix signed comparison in io_poll_get_ownership()(CVE-2026-52933)
ip6: vti: Use ip6_tnl.net in vti6_changelink().(CVE-2026-63917)
netfilter: require Ethernet MAC header before using eth_hdr()(CVE-2026-53131)
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()(CVE-2026-68160)
netfilter: ebtables: fix OOB read in compat_mtw_from_user(CVE-2026-52927)
sctp: fix auth_hmacs array size in struct sctp_cookie(CVE-2026-68376)
bpf: Fix use-after-free in offloaded map/prog info fill(CVE-2026-53089)
iommu/amd: Fix clone_alias() to use the original device's devid(CVE-2026-53053)
af_unix: Fix UAF read of tail-len in unix_stream_data_wait()(CVE-2026-64109)
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()(CVE-2026-64378)
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT(CVE-2026-64374)
netfilter: xt_policy: fix strict mode inbound policy matching(CVE-2026-52920)
tipc: clear sock-sk on the failed-insert path in tipc_sk_create()(CVE-2026-68117)
net: guard timestamp cmsgs to real error queue skbs(CVE-2026-53223)
libceph: bound get_version reply decode to front len(CVE-2026-68433)
pNFS: Fix use-after-free in pnfs_update_layout()(CVE-2026-63800)
net: sit: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72061)
RDMA/umem: Fix truncation for block sizes = 4G(CVE-2026-53133)
bpf, arm64: Fix off-by-one in check_imm signed range check(CVE-2026-53036)
mm/huge_memory: update file PMD counter before folio_put()(CVE-2026-53189)
fsnotify: fix inode reference leak in fsnotify_recalc_mask()(CVE-2026-52990)
netfilter: nf_conntrack_sip: don't use simple_strtoul(CVE-2026-52986)
l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname(CVE-2026-63918)
crypto: ccp - copy IV using skcipher ivsize(CVE-2026-53016)
isofs: bound Rock Ridge symlink components to the SL record(CVE-2026-64317)
fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var(CVE-2026-53403)
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()(CVE-2026-53352)
netfilter: ip6t_hbh: reject oversized option lists(CVE-2026-52915)
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized(CVE-2026-64192)
neigh: let neigh_xmit take skb ownership(CVE-2026-52981)
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new(CVE-2026-72020)
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.(CVE-2025-54518)
netfilter: nf_tables: use list_del_rcu for netlink hooks(CVE-2026-46324)
tipc: restrict socket queue dumps in enqueue tracepoints(CVE-2026-72299)
tipc: fix u16 MTU truncation in media and bearer MTU validation(CVE-2026-68297)
netfilter: nft_fib: fix stale stack leak via the OIFNAME register(CVE-2026-53134)
proc: protect ptrace_may_access() with exec_update_lock (FD links)(CVE-2026-64375)
netfilter: nfnetlink_osf: fix out-of-bounds read on option matching(CVE-2026-52999)
USB: serial: digi_acceleport: fix memory corruption with small endpoints(CVE-2026-63901)
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72136)
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()(CVE-2026-53195)
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()(CVE-2026-64554)
netdevsim: zero initialize struct iphdr in dummy sk_buff(CVE-2026-52985)
dm era: fix out-of-bounds memory access for non-zero start sector(CVE-2026-72107)
ipv4: free net-ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()(CVE-2026-64002)
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling(CVE-2026-52946)
netfilter: x_tables: avoid leaking percpu counter pointers(CVE-2026-53219)
net/sched: act_api: use RCU with deferred freeing for action lifecycle(CVE-2026-53264)
ipv6: validate extension header length before copying to cmsg(CVE-2026-63920)
ipc/shm: serialize orphan cleanup with shm_nattch updates(CVE-2026-52930)
inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush(CVE-2026-53175)
smb: client: harden POSIX SID length parsing(CVE-2026-64380)
udf: validate free block extents against the partition length(CVE-2026-64324)
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)
vrf: Fix a potential NPD when removing a port from a VRF(CVE-2026-52925)
crypto: qat - validate RSA CRT component lengths(CVE-2026-64304)
fuse: reject fuse_notify() pagecache ops on directories(CVE-2026-53168)
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()(CVE-2026-53225)
tracing: Avoid NULL return from hist_field_name() on truncation(CVE-2026-64028)
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag(CVE-2026-53218)
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE(CVE-2026-72083)
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister(CVE-2026-53349)
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx(CVE-2026-64025)
nfsd: reset write verifier on deferred writeback errors(CVE-2026-53393)
netfilter: nf_queue: hold bridge skb-dev while queued(CVE-2026-52912)
i2c: core: fix adapter deregistration race(CVE-2026-64279)
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle(CVE-2026-64530)
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options(CVE-2026-53249)
thunderbolt: Limit XDomain response copy to actual frame size(CVE-2026-53146)
USB: serial: cypress_m8: validate interrupt packet headers(CVE-2026-63902)
tracing: Check return value of __register_event() in trace_module_add_events()(CVE-2026-74471)
posix-cpu-timers: Prevent UAF caused by non-leader exec() race(CVE-2026-64560)
io-wq: check that the predecessor is hashed in io_wq_remove_pending()(CVE-2026-46274)
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72052)
tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done(CVE-2026-63801)
RDMA/core: Prefer NLA_NUL_STRING(CVE-2026-63860)
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure(CVE-2026-53229)
USB: iowarrior: fix use-after-free on disconnect(CVE-2026-64342)
vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()(CVE-2026-63993)
net: phy: clean the sfp upstream if phy probing fails(CVE-2026-53232)
KEYS: fix overflow in keyctl_pkey_params_get_2()(CVE-2026-63824)
tpm: Make the TPM character devices non-seekable(CVE-2026-72135)
USB: serial: mxuport: fix memory corruption with small endpoint(CVE-2026-63899)
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page(CVE-2026-64320)
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms(CVE-2026-68434)
sctp: don't free the ASCONF's own transport in DEL-IP processing(CVE-2026-64564)
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check(CVE-2026-52998)
USB: serial: belkin_sa: validate interrupt status length(CVE-2026-63903)
USB: ldusb: fix use-after-free on disconnect race(CVE-2026-64343)
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()(CVE-2026-63806)
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls(CVE-2026-53075)
USB: serial: mct_u232: fix missing interrupt-in transfer sanity check(CVE-2026-63897)
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()(CVE-2026-53402)
xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()(CVE-2026-53239)
libceph: reject zero bucket types in crush_decode(CVE-2026-68154)
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres(CVE-2026-64463)
netfilter: xtables: restrict several matches to inet family(CVE-2026-53001)
usb: typec: altmodes/displayport: validate count before reading Status Update VDO(CVE-2026-63961)
udf: validate sparing table length as an entry count, not a byte count(CVE-2026-64322)
ixgbevf: fix use-after-free in VEPA multicast source pruning(CVE-2026-64113)
dm-log: fix a bitset_size overflow on 32bit machines(CVE-2026-72105)
net: psample: fix info leak in PSAMPLE_ATTR_DATA(CVE-2026-64553)
libceph: Fix potential out-of-bounds access in crush_decode()(CVE-2026-52955)
bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap(CVE-2026-53111)
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72054)
nvmet-rdma: handle inline data with a nonzero offset(CVE-2026-72129)
USB: serial: io_ti: fix heap overflow in get_manuf_info()(CVE-2026-53196)
crypto: drbg - Fix returning success on failure in CTR_DRBG(CVE-2026-64306)
netfilter: nf_log: validate MAC header was set before dumping it(CVE-2026-52942)
bpf: Fix ld_{abs,ind} failure path analysis in subprogs(CVE-2026-53090)
dm cache policy smq: fix missing locks in invalidating cache blocks(CVE-2026-53062)
net: openvswitch: fix possible kfree_skb of ERR_PTR(CVE-2026-53227)
ipvs: use parsed transport offset in SCTP state lookup(CVE-2026-72021)
security/keys: fix missed RCU read section on lookup(CVE-2026-64015)
ring-buffer: Use current_context for safe per-CPU buffer swap(CVE-2026-74601)
vfio/pci: Release the VGA arbiter client on register_device() failure(CVE-2026-64475)
ipv4: raw: reject IP_HDRINCL packets with ihl 5(CVE-2026-64114)
thunderbolt: Clamp XDomain response data copy to allocation size(CVE-2026-53148)
ice: fix double-free of tx_buf skb(CVE-2026-53009)
NFSD: Fix SECINFO_NO_NAME decode error cleanup(CVE-2026-53398)
sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks(CVE-2026-53004)
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-63829)
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup(CVE-2026-64547)
media: videobuf2: Set vma_flags in vb2_dma_sg_mmap(CVE-2026-46312)
RDMA/srp: bound SRP_RSP sense copy by the received length(CVE-2026-53186)
xfrm: route MIGRATE notifications to caller's netns(CVE-2026-63914)
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()(CVE-2026-64548)
pmdomain: core: Fix detach procedure for virtual devices in genpd(CVE-2026-46292)
bpf: use kvfree() for replaced sysctl write buffer(CVE-2026-63809)
netlabel: validate unlabeled address and mask attribute lengths(CVE-2026-53238)
ceph: fix a buffer leak in __ceph_setxattr()(CVE-2026-52962)
ipv6: fix possible infinite loop in fib6_select_path()(CVE-2026-63968)
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)
hwrng: virtio: clamp device-reported used.len at copy_data()(CVE-2026-64456)
libceph: Fix potential null-ptr-deref in decode_choose_args()(CVE-2026-52957)
ipvs: ensure inner headers in ICMP errors are in headroom(CVE-2026-72319)
USB: serial: digi_acceleport: fix write buffer corruption(CVE-2026-64333)
net: pull headers in qdisc_pkt_len_segs_init()(CVE-2026-53091)
netfilter: nft_ct: bail out on template ct in get eval(CVE-2026-53267)
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers(CVE-2026-52989)
proc: protect ptrace_may_access() with exec_update_lock (part 1)(CVE-2026-64371)
tracing: Prevent out-of-bounds read in glob matching(CVE-2026-64299)
rbd: eliminate a race in lock_dwork draining on unmap(CVE-2026-64112)
ipv6: sit: reload inner IPv6 header after GSO offloads(CVE-2026-53228)
bridge: stp: Fix a potential use-after-free when deleting a bridge(CVE-2026-72389)
RDMA/mlx5: Fix undefined shift of user RQ WQE size(CVE-2026-74297)
mailbox: add sanity check for channel array(CVE-2026-53295)
USB: legousbtower: fix use-after-free on disconnect race(CVE-2026-64340)
audit: Fix data races of skb_queue_len() readers on audit_queue(CVE-2026-64435)
USB: serial: cypress_m8: fix memory corruption with small endpoint(CVE-2026-63956)
macsec: fix replay protection at XPN lower-PN wrap(CVE-2026-63925)
USB: iowarrior: fix use-after-free on disconnect race(CVE-2026-64341)
KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path(CVE-2026-63794)
dm cache policy smq: check allocation under invalidate lock(CVE-2026-53265)
ipv6: exthdrs: refresh nh after handling HAO option(CVE-2026-63922)
crypto: qat - remove unused character device and IOCTLs(CVE-2026-64529)
crypto: af_alg - Cap AEAD AD length to 0x80000000(CVE-2026-52972)
sctp: auth: verify auth requirement when auth_chunk is NULL(CVE-2026-68300)
thunderbolt: Bound root directory content to block size(CVE-2026-53149)
dm era: fix NULL pointer dereference in metadata_open()(CVE-2026-72316)
KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm-lock(CVE-2026-31592)
RDMA/srpt: fix integer overflow in immediate data length check(CVE-2026-74394)
ipvs: clear the svc scheduler ptr early on edit(CVE-2026-53270)
audit: fix incorrect inheritable capability in CAPSET records(CVE-2026-53287)
isofs: validate Rock Ridge CE continuation extent against volume size(CVE-2026-46303)
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring(CVE-2026-64047)
ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().(CVE-2026-63921)
sctp: validate embedded address parameter length(CVE-2026-74287)
net: tls: prevent chain-after-chain in plain text SG(CVE-2026-64046)
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid(CVE-2026-68320)
nexthop: fix IPv6 route referencing IPv4 nexthop(CVE-2026-53012)
bpf: Free reuseport cBPF prog after RCU grace period.(CVE-2026-52910)
dm cache: fix null-deref with concurrent writes in passthrough mode(CVE-2026-53064)
sctp: validate embedded INIT chunk and address list lengths in cookie(CVE-2026-53224)
crypto: pcrypt - restore callback for non-parallel fallback(CVE-2026-64312)
xfrm: Check for underflow in xfrm_state_mtu(CVE-2026-64009)
drm/edid: fix OOB read in drm_parse_tiled_block()(CVE-2026-64546)
thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()(CVE-2026-63893)
dm cache: fix dirty mapping checking in passthrough mode switching(CVE-2026-53061)
USB: serial: omninet: fix memory corruption with small endpoint(CVE-2026-63928)
net: bridge: stop fast-leave after deleting a port group(CVE-2026-74480)
qede: fix off-by-one in BD ring consumption on build_skb failure(CVE-2026-72339)
i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl(CVE-2026-52948)
ipvs: fix more places with wrong ipv6 transport offsets(CVE-2026-68477)
net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked(CVE-2026-64012)
drm/virtio: use uninterruptible resv lock for plane updates(CVE-2026-64098)
xfrm: Fix dev use-after-free in xfrm async resumption(CVE-2026-72463)
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup(CVE-2026-64510)
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents(CVE-2026-64544)
sysfs: don't remove existing directory on update failure(CVE-2026-64185)
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path(CVE-2026-64534)
sctp: purge outqueue on stale COOKIE-ECHO handling(CVE-2026-52924)
ice: fix NULL pointer dereference in ice_reset_all_vfs()(CVE-2026-53289)
Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel packages.See Also
Plugin Details
Severity: High
ID: 364821
File Name: EulerOS_SA-2026-4057.nasl
Version: 1.2
Type: Local
Family: Huawei Local Security Checks
Published: 10/12/2026
Updated: 10/13/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.3
Percentile: 99.82
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-53196
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.2
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CVSS Score Source: CVE-2026-64424
CVSS v4
Risk Factor: High
Base Score: 7.3
Threat Score: 7.3
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2025-54518
Vulnerability Information
CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:bpftool, p-cpe:/a:huawei:euleros:kernel-abi-stablelists, p-cpe:/a:huawei:euleros:kernel-tools-libs-devel, p-cpe:/a:huawei:euleros:kernel-tools-libs, p-cpe:/a:huawei:euleros:kernel-tools, p-cpe:/a:huawei:euleros:kernel, p-cpe:/a:huawei:euleros:perf, p-cpe:/a:huawei:euleros:python3-perf
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/10/2026
Vulnerability Publication Date: 3/27/2026
CISA Known Exploited Vulnerability Due Dates: 9/21/2026
Exploitable With
Core Impact
Reference Information
CVE: CVE-2025-54518, CVE-2026-31592, CVE-2026-43456, CVE-2026-46165, CVE-2026-46252, CVE-2026-46266, CVE-2026-46274, CVE-2026-46292, CVE-2026-46302, CVE-2026-46303, CVE-2026-46304, CVE-2026-46312, CVE-2026-46322, CVE-2026-46324, CVE-2026-46331, CVE-2026-52909, CVE-2026-52910, CVE-2026-52912, CVE-2026-52915, CVE-2026-52917, CVE-2026-52920, CVE-2026-52921, CVE-2026-52923, CVE-2026-52924, CVE-2026-52925, CVE-2026-52927, CVE-2026-52929, CVE-2026-52930, CVE-2026-52933, CVE-2026-52936, CVE-2026-52937, CVE-2026-52942, CVE-2026-52943, CVE-2026-52946, CVE-2026-52948, CVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958, CVE-2026-52962, CVE-2026-52970, CVE-2026-52972, CVE-2026-52975, CVE-2026-52981, CVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52988, CVE-2026-52989, CVE-2026-52990, CVE-2026-52991, CVE-2026-52993, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53009, CVE-2026-53012, CVE-2026-53015, CVE-2026-53016, CVE-2026-53021, CVE-2026-53036, CVE-2026-53037, CVE-2026-53053, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53078, CVE-2026-53083, CVE-2026-53089, CVE-2026-53090, CVE-2026-53091, CVE-2026-53111, CVE-2026-53129, CVE-2026-53131, CVE-2026-53133, CVE-2026-53134, CVE-2026-53138, CVE-2026-53146, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150, CVE-2026-53163, CVE-2026-53167, CVE-2026-53168, CVE-2026-53175, CVE-2026-53176, CVE-2026-53177, CVE-2026-53186, CVE-2026-53189, CVE-2026-53194, CVE-2026-53195, CVE-2026-53196, CVE-2026-53199, CVE-2026-53218, CVE-2026-53219, CVE-2026-53220, CVE-2026-53221, CVE-2026-53223, CVE-2026-53224, CVE-2026-53225, CVE-2026-53227, CVE-2026-53228, CVE-2026-53229, CVE-2026-53230, CVE-2026-53232, CVE-2026-53236, CVE-2026-53238, CVE-2026-53239, CVE-2026-53245, CVE-2026-53246, CVE-2026-53249, CVE-2026-53264, CVE-2026-53265, CVE-2026-53266, CVE-2026-53267, CVE-2026-53268, CVE-2026-53269, CVE-2026-53270, CVE-2026-53275, CVE-2026-53287, CVE-2026-53289, CVE-2026-53295, CVE-2026-53314, CVE-2026-53330, CVE-2026-53337, CVE-2026-53349, CVE-2026-53352, CVE-2026-53369, CVE-2026-53381, CVE-2026-53385, CVE-2026-53388, CVE-2026-53392, CVE-2026-53393, CVE-2026-53397, CVE-2026-53398, CVE-2026-53399, CVE-2026-53400, CVE-2026-53402, CVE-2026-53403, CVE-2026-63794, CVE-2026-63800, CVE-2026-63801, CVE-2026-63806, CVE-2026-63809, CVE-2026-63810, CVE-2026-63823, CVE-2026-63824, CVE-2026-63826, CVE-2026-63827, CVE-2026-63828, CVE-2026-63829, CVE-2026-63830, CVE-2026-63860, CVE-2026-63868, CVE-2026-63887, CVE-2026-63888, CVE-2026-63891, CVE-2026-63893, CVE-2026-63897, CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63912, CVE-2026-63913, CVE-2026-63914, CVE-2026-63917, CVE-2026-63918, CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63922, CVE-2026-63924, CVE-2026-63925, CVE-2026-63926, CVE-2026-63928, CVE-2026-63942, CVE-2026-63956, CVE-2026-63957, CVE-2026-63961, CVE-2026-63963, CVE-2026-63968, CVE-2026-63969, CVE-2026-63971, CVE-2026-63984, CVE-2026-63990, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64002, CVE-2026-64006, CVE-2026-64007, CVE-2026-64009, CVE-2026-64012, CVE-2026-64015, CVE-2026-64025, CVE-2026-64028, CVE-2026-64046, CVE-2026-64047, CVE-2026-64098, CVE-2026-64106, CVE-2026-64109, CVE-2026-64112, CVE-2026-64113, CVE-2026-64114, CVE-2026-64118, CVE-2026-64146, CVE-2026-64165, CVE-2026-64170, CVE-2026-64185, CVE-2026-64187, CVE-2026-64189, CVE-2026-64191, CVE-2026-64192, CVE-2026-64210, CVE-2026-64237, CVE-2026-64252, CVE-2026-64266, CVE-2026-64279, CVE-2026-64298, CVE-2026-64299, CVE-2026-64304, CVE-2026-64305, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64317, CVE-2026-64320, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64332, CVE-2026-64333, CVE-2026-64334, CVE-2026-64335, CVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343, CVE-2026-64344, CVE-2026-64351, CVE-2026-64362, CVE-2026-64371, CVE-2026-64374, CVE-2026-64375, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380, CVE-2026-64388, CVE-2026-64412, CVE-2026-64413, CVE-2026-64422, CVE-2026-64424, CVE-2026-64435, CVE-2026-64436, CVE-2026-64438, CVE-2026-64448, CVE-2026-64450, CVE-2026-64456, CVE-2026-64463, CVE-2026-64465, CVE-2026-64475, CVE-2026-64496, CVE-2026-64510, CVE-2026-64512, CVE-2026-64513, CVE-2026-64514, CVE-2026-64529, CVE-2026-64530, CVE-2026-64534, CVE-2026-64538, CVE-2026-64540, CVE-2026-64543, CVE-2026-64544, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64551, CVE-2026-64553, CVE-2026-64554, CVE-2026-64560, CVE-2026-64564, CVE-2026-64582, CVE-2026-64600, CVE-2026-68117, CVE-2026-68153, CVE-2026-68154, CVE-2026-68160, CVE-2026-68297, CVE-2026-68300, CVE-2026-68320, CVE-2026-68376, CVE-2026-68425, CVE-2026-68433, CVE-2026-68434, CVE-2026-68477, CVE-2026-72020, CVE-2026-72021, CVE-2026-72052, CVE-2026-72054, CVE-2026-72055, CVE-2026-72061, CVE-2026-72083, CVE-2026-72105, CVE-2026-72107, CVE-2026-72129, CVE-2026-72135, CVE-2026-72136, CVE-2026-72299, CVE-2026-72310, CVE-2026-72316, CVE-2026-72318, CVE-2026-72319, CVE-2026-72339, CVE-2026-72389, CVE-2026-72463, CVE-2026-72472, CVE-2026-74283, CVE-2026-74287, CVE-2026-74297, CVE-2026-74391, CVE-2026-74394, CVE-2026-74471, CVE-2026-74480, CVE-2026-74601