There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for
    unaligned extents After unaligned compressed extents were introduced, the following race could occur:
    [Thread 1] [Thread 2] (z_erofs_fill_bio_vec) <handle a Z_EROFS_PREALLOCATED_FOLIO folio> ...
    filemap_add_folio (1) (z_erofs_bind_cache) <the same folio is found..> .. .. folio_attach_private (2)
    filemap_add_folio (3) again Since (1) is executed but (2) hasn't been executed yet, it's possible that
    another thread finds the same managed folio in z_erofs_bind_cache() for a different pcluster and calls
    filemap_add_folio() again since folio->private is still Z_EROFS_PREALLOCATED_FOLIO. Fix this by explicitly
    clearing folio->private before making the folio visible in the managed cache so that another pcluster can
    simply wait on the locked managed folio as what we did for other shared cases [1]. This only impacts
    unaligned data compression (`-E48bit` with zstd, for example). [1] Commit 9e2f9d34dd12 ("erofs: handle
    overlapped pclusters out of crafted images properly") was originally introduced to handle crafted
    overlapped extents, but it addresses unaligned extents as well. (CVE-2026-64031)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for     unaligned extents After unaligned compressed extents were introduced, the following race could occur:
    [Thread 1] [Thread 2] (z_erofs_fill_bio_vec) <handle a Z_EROFS_PREALLOCATED_FOLIO folio> ...
    filemap_add_folio (1) (z_erofs_bind_cache) <the same folio is found..> .. .. folio_attach_private (2)     filemap_add_folio (3) again Since (1) is executed but (2) hasn't been executed yet, it's possible that     another thread finds the same managed folio in z_erofs_bind_cache() for a different pcluster and calls     filemap_add_folio() again since folio->private is still Z_EROFS_PREALLOCATED_FOLIO. Fix this by explicitly     clearing folio->private before making the folio visible in the managed cache so that another pcluster can     simply wait on the locked managed folio as what we did for other shared cases [1]. This only impacts     unaligned data compression (`-E48bit` with zstd, for example). [1] Commit 9e2f9d34dd12 (erofs: handle     overlapped pclusters out of crafted images properly) was originally introduced to handle crafted     overlapped extents, but it addresses unaligned extents as well. (CVE-2026-64031)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
471128	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19862.0.0	Tenable Cloud Security	Google COS Security Checks	10/3/2026	10/6/2026	high
471128	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19862.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	10/3/2026	10/6/2026	high
328285	Linux Distros Unpatched Vulnerability : CVE-2026-64031	Nessus	Misc.	7/20/2026	10/6/2026	high
322087	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1881)	Nessus	Amazon Linux Local Security Checks	6/22/2026	9/28/2026	high
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	10/8/2026	10/8/2026	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/24/2026	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/24/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/23/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high