The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5087-1 advisory.

    Security issue fixed:

    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

    Non security issue fixed:

    - Xen: Missing upstream bug fixes (bsc#1027519).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0d1924f837 advisory.

    arbitrary read/write via grant copy     [XSA-523, CVE-2026-102703, CVE-2026-102704]


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities     correspond to which CVE.] A common access pattern is a batch of Grant Copy operations acting on adjacent     address ranges in the same source or destination page. For performance reasons, Xen caches details     internally to reuse already validated data. The conditions on when to re-validate the internal data were     not correct in some cases: - Frame numbers and grant references could wrongly be mixed up. This is     CVE-2026-102703. - Copying by frame number (rather than grant reference) is permitted only when operating     on the caller's own memory. The check to enforce this restriction was misplaced. This is CVE-2026-102704.
    (CVE-2026-102703)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5140-1 advisory.

    Security issues fixed:

    - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838).
    - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).
    - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing (bsc#1276841).
    - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321).
    - CVE-2026-79610: grant-table: double version change race (bsc#1283322).
    - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323).
    - CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325).
    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

    Non security issue fixed:

    - Update to Xen 4.18.6 security bug fix release (bsc#1027519).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5159-1 advisory.

    This update for xen fixes the following issue:

    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
376266	SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5087-1)	Nessus	SuSE Local Security Checks	2026/11/5	2026/11/13	medium
378079	Fedora 44 : xen (2026-0d1924f837)	Nessus	Fedora Local Security Checks	2026/11/10	2026/11/13	medium
375595	Linux Distros Unpatched Vulnerability : CVE-2026-102703	Nessus	Misc.	2026/11/3	2026/11/9	medium
378047	SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5140-1)	Nessus	SuSE Local Security Checks	2026/11/10	2026/11/13	high
379482	SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5159-1)	Nessus	SuSE Local Security Checks	2026/11/12	2026/11/13	medium

偵測

搜尋 Plugin

medium

medium

medium

high

medium