An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dm ioctl: don't let data_start run past the buffer struct dm_ioctl has seven bytes of trailing padding, so     the smallest buffer userspace is allowed to ask for, offsetof(struct dm_ioctl, data), is seven bytes     shorter than sizeof(struct dm_ioctl). get_result_buffer() sets data_start to sizeof(struct dm_ioctl)     without looking at how big the buffer actually is. Ask for the minimum and data_start ends up seven bytes     past the end. Callers add it to data_size, and ctl_ioctl() copies that much back to userspace: BUG: KASAN:
    slab-out-of-bounds in _copy_to_user+0xad/0xd0 Read of size 312 at addr ffff8880169e4c00 by task repro-     dm/140 ctl_ioctl+0x5e3/0xcb0 dm_ctl_ioctl+0x25/0x40 allocated 305-byte region [ffff8880169e4c00,     ffff8880169e4d31) A DM_LIST_DEVICES with data_size set to 305 is enough to hit it, and the seven bytes     that leak are whatever sat next to the allocation. Clamp data_start to the buffer size. Note that this is     not a security bug because the out-of-bounds read can only be triggered by root. (CVE-2026-99063)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
373466	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3335)	Nessus	Amazon Linux Local Security Checks	10/29/2026	11/4/2026	medium
375086	Photon OS 5.0: Linux PHSA-2026-5.0-92-1044	Nessus	PhotonOS Local Security Checks	11/2/2026	11/2/2026	critical
371567	Linux Distros Unpatched Vulnerability : CVE-2026-99063	Nessus	Misc.	10/23/2026	11/11/2026	high
379876	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-121)	Nessus	Amazon Linux Local Security Checks	11/12/2026	11/12/2026	critical
379844	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-139)	Nessus	Amazon Linux Local Security Checks	11/12/2026	11/12/2026	critical

Detections

Analytics

Plugins Search

medium

critical

high

critical

critical