The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdisc_put_rtab()     mutate the process-global singly linked list qdisc_rtab_list and a plain non-atomic 'int refcnt' with no     lock. This was only safe because every caller historically held the RTNL mutex, which serialized all rate-     table lookups, inserts and frees. That invariant no longer holds. cls_flower sets     TCF_PROTO_OPS_DOIT_UNLOCKED, so tc_new_tfilter() keeps rtnl_held == false for it and sets     TCA_ACT_FLAGS_NO_RTNL. That flag propagates through tcf_exts_validate_ex() -> tcf_action_init() ->     tcf_action_init_1() -> tcf_police_init(), which calls qdisc_get_rtab()/qdisc_put_rtab() with the RTNL     mutex NOT held. Two RTM_NEWTFILTER requests on different CPUs, each adding a flower filter with a police     action carrying the same rate, then race on qdisc_rtab_list and on the non-atomic refcnt, leading to a     use-after-free / double-free of the kmalloc-2k struct qdisc_rate_table. qdisc_rtab_list is a single global     (not per-netns), so the corrupted object is shared system-wide. BUG: KASAN: slab-use-after-free in     qdisc_put_rtab+0x12f/0x160 qdisc_put_rtab+0x12f/0x160 tcf_police_init+0xda9/0x1590     tcf_action_init_1+0x460/0x6b0 tcf_action_init+0x439/0xa40 tcf_exts_validate_ex+0x42d/0x550     fl_change+0xddd/0x7da0 tc_new_tfilter+0xaa7/0x2420 rtnetlink_rcv_msg+0x95e/0xe90 which belongs to the     cache kmalloc-2k of size 2048 Protect qdisc_rtab_list and the refcount with a dedicated spinlock. The     (sleeping, GFP_KERNEL) allocation in qdisc_get_rtab() is performed before taking the lock; if a concurrent     inserter added an identical table in the meantime the freshly allocated one is freed under the lock, so no     duplicate is leaked. qdisc_put_rtab() now decrements the refcount and unlinks under the same lock.
    (CVE-2026-68138)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6466 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6466-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 25, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-38525 CVE-2025-40054 CVE-2026-43197 CVE-2026-53092                      CVE-2026-64017 CVE-2026-64586 CVE-2026-68082 CVE-2026-68118                      CVE-2026-68132 CVE-2026-68138 CVE-2026-68159 CVE-2026-68166                      CVE-2026-68169 CVE-2026-68198 CVE-2026-68253 CVE-2026-68254                      CVE-2026-68264 CVE-2026-68266 CVE-2026-68267 CVE-2026-68273                      CVE-2026-68276 CVE-2026-68322 CVE-2026-68367 CVE-2026-68431                      CVE-2026-68451 CVE-2026-68452 CVE-2026-68480 CVE-2026-72111                      CVE-2026-74440 CVE-2026-74441 CVE-2026-74442 CVE-2026-74443                      CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447                      CVE-2026-74448 CVE-2026-74450 CVE-2026-74451 CVE-2026-74452                      CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456                      CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460                      CVE-2026-74461 CVE-2026-74463 CVE-2026-74464 CVE-2026-74465                      CVE-2026-74467 CVE-2026-74468 CVE-2026-74469 CVE-2026-74470                      CVE-2026-74471 CVE-2026-74472 CVE-2026-74473 CVE-2026-74474                      CVE-2026-74475 CVE-2026-74476 CVE-2026-74478 CVE-2026-74479                      CVE-2026-74480 CVE-2026-74481 CVE-2026-74482 CVE-2026-74483                      CVE-2026-74484 CVE-2026-74485 CVE-2026-74487 CVE-2026-74488                      CVE-2026-74490 CVE-2026-74492 CVE-2026-74493 CVE-2026-74494                      CVE-2026-74495 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499                      CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503                      CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508                      CVE-2026-74509 CVE-2026-74510 CVE-2026-74512 CVE-2026-74514                      CVE-2026-74515 CVE-2026-74516 CVE-2026-74517 CVE-2026-74518                      CVE-2026-74519 CVE-2026-74522 CVE-2026-74523 CVE-2026-74524                      CVE-2026-74525 CVE-2026-74531 CVE-2026-74532 CVE-2026-74535                      CVE-2026-74536 CVE-2026-74540 CVE-2026-74541 CVE-2026-74543                      CVE-2026-74545 CVE-2026-74546 CVE-2026-74547 CVE-2026-74548                      CVE-2026-74549 CVE-2026-74550 CVE-2026-74551 CVE-2026-74552                      CVE-2026-74553 CVE-2026-74555 CVE-2026-74556 CVE-2026-74557                      CVE-2026-74563 CVE-2026-74564 CVE-2026-74565 CVE-2026-74566                      CVE-2026-74567 CVE-2026-74569 CVE-2026-74572 CVE-2026-74574                      CVE-2026-74575 CVE-2026-74576 CVE-2026-74577 CVE-2026-74579                      CVE-2026-74580 CVE-2026-74581 CVE-2026-74582 CVE-2026-74583                      CVE-2026-74585 CVE-2026-74586 CVE-2026-74587 CVE-2026-74588                      CVE-2026-74589 CVE-2026-74590 CVE-2026-74592 CVE-2026-74594                      CVE-2026-74595 CVE-2026-74597 CVE-2026-74598 CVE-2026-74599                      CVE-2026-74601 CVE-2026-74602 CVE-2026-74603 CVE-2026-74604                      CVE-2026-74606 CVE-2026-74607 CVE-2026-74608 CVE-2026-74609                      CVE-2026-74610 CVE-2026-74612 CVE-2026-74613 CVE-2026-74614                      CVE-2026-74615 CVE-2026-74616 CVE-2026-74618 CVE-2026-74619                      CVE-2026-74620 CVE-2026-74621 CVE-2026-74622 CVE-2026-74623                      CVE-2026-74624 CVE-2026-74625 CVE-2026-74628 CVE-2026-74630                      CVE-2026-74631 CVE-2026-74632 CVE-2026-74634 CVE-2026-74635                      CVE-2026-74636 CVE-2026-74637 CVE-2026-74641 CVE-2026-74644                      CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649                      CVE-2026-74650 CVE-2026-74651 CVE-2026-74654 CVE-2026-74655                      CVE-2026-74656 CVE-2026-74657 CVE-2026-74658 CVE-2026-74659                      CVE-2026-74660 CVE-2026-74661 CVE-2026-74663 CVE-2026-74664                      CVE-2026-74665 CVE-2026-74666 CVE-2026-74667 CVE-2026-74668                      CVE-2026-74669 CVE-2026-74670 CVE-2026-74671 CVE-2026-74672                      CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677                      CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682                      CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74688                      CVE-2026-74689 CVE-2026-74691 CVE-2026-74692 CVE-2026-74693                      CVE-2026-74694 CVE-2026-74696 CVE-2026-74700 CVE-2026-74701                      CVE-2026-74704 CVE-2026-74705 CVE-2026-74710 CVE-2026-74712                      CVE-2026-74714 CVE-2026-74717 CVE-2026-74718 CVE-2026-74719                      CVE-2026-74720 CVE-2026-74722 CVE-2026-74724 CVE-2026-74725                      CVE-2026-74726 CVE-2026-74730 CVE-2026-74732     Debian Bug     : 1142912 1143545

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.105-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.265-265.1078. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-130 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    tls: separate no-async decryption request handling from async (CVE-2024-58240)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: Fix race condition in AF_XDP generic RX path (CVE-2025-37920)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix ld_{abs,ind} failure path analysis in subprogs (CVE-2026-53090)

    In the Linux kernel, the following vulnerability has been resolved:

    nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (CVE-2026-64543)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: nVMX: Hide shadow VMCS right after VMCLEAR (CVE-2026-64562)

    In the Linux kernel, the following vulnerability has been resolved:

    rhashtable: clear stale iter->p on table restart (CVE-2026-64563)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: reject free space cache with more entries than pages (CVE-2026-64567)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (CVE-2026-64579)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (CVE-2026-64581)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)

    In the Linux kernel, the following vulnerability has been resolved:

    pppoe: reload header pointer after dev_hard_header() (CVE-2026-68121)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: reload IPv6 header after pskb_may_pull in checksum adjust (CVE-2026-68127)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: Reset positive result codes to zero in object map update path (CVE-2026-68131)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: serialize qdisc_rtab_list against concurrent get/put (CVE-2026-68138)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68142)

    In the Linux kernel, the following vulnerability has been resolved:

    net: slip: serialize receive against buffer reallocation (CVE-2026-68143)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: remove debugfs files before client teardown (CVE-2026-68153)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: reject zero bucket types in crush_decode (CVE-2026-68154)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Reject monmaps advertising zero monitors (CVE-2026-68155)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: guard missing CRUSH type name lookup (CVE-2026-68157)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Fix multiplication overflow in decode_new_up_state_weight() (CVE-2026-68158)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (CVE-2026-68160)

    In the Linux kernel, the following vulnerability has been resolved:

    cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (CVE-2026-68184)

    In the Linux kernel, the following vulnerability has been resolved:

    binfmt_misc: set have_execfd only once the interpreter is opened (CVE-2026-68186)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (CVE-2026-68284)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix u16 MTU truncation in media and bearer MTU validation (CVE-2026-68297)

    In the Linux kernel, the following vulnerability has been resolved:

    vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix infinite loop in __tipc_nl_compat_dumpit (CVE-2026-68313)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (CVE-2026-68320)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled (CVE-2026-68322)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: Bound the early ACPI HID map (CVE-2026-68325)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: drop incoming messages that cross network namespace boundaries (CVE-2026-68335)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: io_edgeport: cap received transmit credits (CVE-2026-68365)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_tunnel_key: Defer dst_release to RCU callback (CVE-2026-68377)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (CVE-2026-68398)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix UAF in sock clone early bailouts (CVE-2026-68399)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/mad: Drop unmatched RMPP responses before reassembly (CVE-2026-68425)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86/mmu: Fix use-after-free on vendor module reload (CVE-2026-68428)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: bound get_version reply decode to front len (CVE-2026-68433)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/bugs: Make Safe-RET robust against interrupt injection (CVE-2026-68480)

    In the Linux kernel, the following vulnerability has been resolved:

    macsec: don't read an unset MAC header in macsec_encrypt() (CVE-2026-72019)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72051)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipip: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72053)

    In the Linux kernel, the following vulnerability has been resolved:

    cpu: hotplug: Bound hotplug states sysfs output (CVE-2026-72066)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add missing device refcount for CAN filter removal (CVE-2026-72113)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: validate frame length in bcm_rx_setup() for RTR replies (CVE-2026-72114)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: track a single source interface for ANYDEV timeout/throttle ops (CVE-2026-72115)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix stale rx/tx ops after device removal (CVE-2026-72116)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() (CVE-2026-72117)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: fix CAN frame rx/tx statistics (CVE-2026-72118)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: extend bcm_tx_lock usage for data and timer updates (CVE-2026-72119)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add locking when updating filter and timer values (CVE-2026-72121)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CVE-2026-72123)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (CVE-2026-72392)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: reject inverted service ranges from peer bindings (CVE-2026-74281)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix skb leak on flow key update failure during ct (CVE-2026-74464)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix potential UAF on meter attach failure (CVE-2026-74465)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: prevent peer transport count overflow (CVE-2026-74469)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Check return value of __register_event() in trace_module_add_events() (CVE-2026-74471)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: use pskb_network_may_pull() in route_shortcircuit() (CVE-2026-74473)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: use neigh_ha_snapshot() in route_shortcircuit() (CVE-2026-74475)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/page_reporting: use system_freezable_wq to fix UAF during suspend (CVE-2026-74481)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (CVE-2026-74482)

    In the Linux kernel, the following vulnerability has been resolved:

    binfmt_misc: reject a flag character as the field delimiter (CVE-2026-74485)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: avoid use-after-free in poll trace queue dumps (CVE-2026-74490)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: do not update comments from kernel-side hash adds (CVE-2026-74492)

    In the Linux kernel, the following vulnerability has been resolved:

    igbvf: Fix leak in TX DMA error cleanup (CVE-2026-74495)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: fix potential use-after-free in audit_del_rule() (CVE-2026-74512)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518)

    In the Linux kernel, the following vulnerability has been resolved:

    pinctrl: devicetree: don't free uninitialized dev_name on error path (CVE-2026-74519)

    In the Linux kernel, the following vulnerability has been resolved:

    qede: sync udp_tunnel ports outside qede_lock in the recovery path (CVE-2026-74523)

    In the Linux kernel, the following vulnerability has been resolved:

    hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (CVE-2026-74547)

    In the Linux kernel, the following vulnerability has been resolved:

    hwmon: (nct6775-core) Prevent access to unsupported weight registers (CVE-2026-74549)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (CVE-2026-74557)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() (CVE-2026-74563)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (CVE-2026-74564)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: make keyring key-chunk byte order agree with keyring_diff_objects() (CVE-2026-74566)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: fix out-of-bounds read in keyring_get_key_chunk() (CVE-2026-74567)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)

    In the Linux kernel, the following vulnerability has been resolved:

    net: mpls: initialize rtm_tos in mpls_getroute() (CVE-2026-74577)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_payload: fix mask build for partial field offload (CVE-2026-74579)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost: reset the vring metadata cache on vring reconfiguration (CVE-2026-74580)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: bridge: release template ct on non-IP path (CVE-2026-74625)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2107 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    blk-mq: pop cached request if it is usable (CVE-2026-64017)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (CVE-2026-64581)

    In the Linux kernel, the following vulnerability has been resolved:

    rbd: Reset positive result codes to zero in object map update path (CVE-2026-68131)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: serialize qdisc_rtab_list against concurrent get/put (CVE-2026-68138)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: Reject monmaps advertising zero monitors (CVE-2026-68155)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (CVE-2026-68160)

    In the Linux kernel, the following vulnerability has been resolved:

    vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

    In the Linux kernel, the following vulnerability has been resolved:

    rds: drop incoming messages that cross network namespace boundaries (CVE-2026-68335)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/bugs: Make Safe-RET robust against interrupt injection (CVE-2026-68480)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72051)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost: reset the vring metadata cache on vring reconfiguration (CVE-2026-74580)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
334275	Linux Distros Unpatched Vulnerability : CVE-2026-68138	Nessus	Misc.	8/10/2026	8/28/2026	high
339550	Debian dsa-6466 : ata-modules-6.12.101+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	8/25/2026	8/29/2026	medium
341859	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-130 (ALASKERNEL-5.10-2026-130)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	high
342043	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2107)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	critical
341888	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2106)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	high
341899	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)	Nessus	Amazon Linux Local Security Checks	8/31/2026	8/31/2026	medium

Detections

Analytics

Plugins Search

high

medium

high

critical

high

medium