The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip_vcnt in     bio_integrity_copy_user() bio_integrity_add_page() already sets bip_vcnt to 1 for the bounce segment.
    Overwriting it with nr_vecs breaks bip_vcnt <= bip_max_vcnt on WRITE (bip_max_vcnt is 1), so the gap-merge     checks in block/blk.h read past the bip_vec[] flex array. On READ the read is in bounds but lands on a     saved user bvec instead of the bounce. The line was added for split propagation, but bio_integrity_clone()     doesn't copy bip_vcnt and BIP_CLONE_FLAGS excludes BIP_COPY_USER. (CVE-2026-64053)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71233 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007)

    * kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address     rewrite (CVE-2026-53266)

    * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)

    * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802)

    * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053)

    * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383)

    * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

    * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201)

    * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)

    * kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)

    * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844)

    * kernel: net: tun: bound receive headroom (CVE-2026-81000)

    * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

    Bug Fix(es) and Enhancement(s):

    * kernel module .ko ELF files with non-zero sh_addr section addresses [rhel-10.2.z] (JIRA:RHEL-159298)

    * sctp: prevent peer transport count overflow [rhel-10.2.z] (JIRA:RHEL-216247)

    * [RHEL 10] bnxt_en: RX queue restart failed: err=-95 [rhel-10.2.z] (JIRA:RHEL-247283)

    * RHIVOS - S32G: backport missing fixes to 10.2 (JIRA:RHEL-259788)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71232 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007)

    * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005)

    * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)

    * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802)

    * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053)

    * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383)

    * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

    * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

    * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201)

    * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261)

    * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844)

    * kernel: net: tun: bound receive headroom (CVE-2026-81000)

    * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

    Bug Fix(es) and Enhancement(s):

    * sctp: prevent peer transport count overflow [rhel-9.8.z] (JIRA:RHEL-216251)

    * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:RHEL-236634)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
328113	Linux Distros Unpatched Vulnerability : CVE-2026-64053	Nessus	Misc.	7/20/2026	9/24/2026	high
322087	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1881)	Nessus	Amazon Linux Local Security Checks	6/22/2026	8/13/2026	high
322107	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1894)	Nessus	Amazon Linux Local Security Checks	6/22/2026	9/17/2026	high
318773	Photon OS 5.0: Linux PHSA-2026-5.0-0864	Nessus	PhotonOS Local Security Checks	6/5/2026	8/26/2026	high
349655	RHEL 10 : kernel (RHSA-2026:71233)	Nessus	Red Hat Local Security Checks	9/24/2026	9/24/2026	medium
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/24/2026	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/24/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/23/2026	high
349668	RHEL 9 : kernel (RHSA-2026:71232)	Nessus	Red Hat Local Security Checks	9/24/2026	9/24/2026	medium
333944	Photon OS 5.0: Linux PHSA-2026-5.0-92-0864	Nessus	PhotonOS Local Security Checks	8/10/2026	8/24/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

medium

high

high

high

medium

high