The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5087-1 advisory.

    Security issue fixed:

    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

    Non security issue fixed:

    - Xen: Missing upstream bug fixes (bsc#1027519).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Debian Linux - xen - None (CVE-2026-102704)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0d1924f837 advisory.

    arbitrary read/write via grant copy     [XSA-523, CVE-2026-102703, CVE-2026-102704]


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5140-1 advisory.

    Security issues fixed:

    - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838).
    - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).
    - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing (bsc#1276841).
    - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321).
    - CVE-2026-79610: grant-table: double version change race (bsc#1283322).
    - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323).
    - CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325).
    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

    Non security issue fixed:

    - Update to Xen 4.18.6 security bug fix release (bsc#1027519).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5159-1 advisory.

    This update for xen fixes the following issue:

    - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
376266	SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5087-1)	Nessus	SuSE Local Security Checks	2026/11/5	2026/11/5	medium
375563	Linux Distros Unpatched Vulnerability : CVE-2026-102704	Nessus	Misc.	2026/11/3	2026/11/5	medium
378079	Fedora 44 : xen (2026-0d1924f837)	Nessus	Fedora Local Security Checks	2026/11/10	2026/11/10	medium
378047	SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5140-1)	Nessus	SuSE Local Security Checks	2026/11/10	2026/11/10	high
379482	SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5159-1)	Nessus	SuSE Local Security Checks	2026/11/12	2026/11/12	medium

偵測

搜尋 Plugin

medium

medium

medium

high

medium