An update of the linux package has been released.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6381 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6381-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 05, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010                      CVE-2026-43216 CVE-2026-43355 CVE-2026-46054 CVE-2026-46242                      CVE-2026-46252 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101                      CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157                      CVE-2026-53163 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325                      CVE-2026-53327 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361                      CVE-2026-53362     Debian Bug     : 1136179 1139686

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.95-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rxrpc: Fix the ACK parser to extract the SACK table for parsing Fix modification of the received skbuff in     rxrpc_input_soft_acks() and a potential incorrect access of the buffer in a fragmented UDP packet (the     packet would probably have to be deliberately pre-generated as fragmented) when AF_RXRPC tries to extract     the contents of the SACK table by copying out the contents of the SACK table into a buffer before     attempting to parse AF_RXRPC assumes that it can just call skb_condense() and then validly access the SACK     table from skb->data and that it will be a flat buffer - but skb_condense() can silently fail to do     anything under some circumstances. Note that whilst rxrpc_input_soft_acks() should be able to parse     extended ACKs, the rest of AF_RXRPC doesn't currently support that. Further, there's then no need to call     skb_condense() in rxrpc_input_ack(), so don't. (CVE-2026-53151)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
326038	Photon OS 5.0: Linux PHSA-2026-5.0-0916	Nessus	PhotonOS Local Security Checks	7/9/2026	8/1/2026	high
325146	Debian dsa-6381 : ata-modules-6.12.90+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	7/6/2026	7/11/2026	high
323577	Linux Distros Unpatched Vulnerability : CVE-2026-53151	Nessus	Misc.	6/28/2026	7/25/2026	critical

Detections

Analytics

Plugins Search

high

high

critical