The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eir_create_adv_data() builds the     advertising data into a fixed-size buffer (size, 31 for the legacy path). It may prepend a 3-byte     Flags AD structure (LE_AD_NO_BREDR on an LE-only controller) and then copies the per-instance data     without checking that it still fits: memcpy(ptr, adv->adv_data, adv->adv_data_len); tlv_data_max_len()     only reserves those 3 bytes when the user-supplied flags carry a managed-flags bit, so an instance added     with flags == 0 is accepted with adv_data_len up to the full buffer. At advertise time the flags are still     prepended, and the memcpy() writes 3 + adv_data_len bytes into the size-byte buffer: BUG: KASAN: stack-     out-of-bounds in eir_create_adv_data (net/bluetooth/eir.c:301) Write of size 31 at addr ffff88800a547bdc     by task kworker/u9:0/65 Workqueue: hci0 hci_cmd_sync_work __asan_memcpy (mm/kasan/shadow.c:106)     eir_create_adv_data (net/bluetooth/eir.c:301) hci_update_adv_data_sync (net/bluetooth/hci_sync.c:1310)     hci_schedule_adv_instance_sync (net/bluetooth/hci_sync.c:1817) hci_cmd_sync_work     (net/bluetooth/hci_sync.c:332) This frame has 1 object: [32, 64) 'cp' The Flags structure is added by     the kernel, not requested by userspace, so only prepend it when it fits together with the instance     advertising data; when there is no room for both, drop the flags rather than the user-provided data.
    Reachable by a local user with CAP_NET_ADMIN owning an LE-only controller on the legacy advertising path.
    (CVE-2026-64539)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6405 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6405-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 31, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2026-45944 CVE-2026-53005 CVE-2026-53260 CVE-2026-53365                      CVE-2026-63970 CVE-2026-64192 CVE-2026-64206 CVE-2026-64227                      CVE-2026-64286 CVE-2026-64287 CVE-2026-64307 CVE-2026-64341                      CVE-2026-64352 CVE-2026-64361 CVE-2026-64363 CVE-2026-64364                      CVE-2026-64369 CVE-2026-64371 CVE-2026-64375 CVE-2026-64390                      CVE-2026-64401 CVE-2026-64405 CVE-2026-64413 CVE-2026-64416                      CVE-2026-64421 CVE-2026-64428 CVE-2026-64434 CVE-2026-64438                      CVE-2026-64441 CVE-2026-64461 CVE-2026-64462 CVE-2026-64472                      CVE-2026-64481 CVE-2026-64488 CVE-2026-64493 CVE-2026-64507                      CVE-2026-64508 CVE-2026-64509 CVE-2026-64510 CVE-2026-64530                      CVE-2026-64531 CVE-2026-64532 CVE-2026-64533 CVE-2026-64534                      CVE-2026-64535 CVE-2026-64537 CVE-2026-64538 CVE-2026-64539                      CVE-2026-64540 CVE-2026-64541 CVE-2026-64542 CVE-2026-64543                      CVE-2026-64544 CVE-2026-64545 CVE-2026-64546 CVE-2026-64547                      CVE-2026-64548 CVE-2026-64549 CVE-2026-64550 CVE-2026-64551                      CVE-2026-64552 CVE-2026-64553 CVE-2026-64554 CVE-2026-64555                      CVE-2026-64557 CVE-2026-64558 CVE-2026-64559 CVE-2026-64560     Debian Bug     : 1130336

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.100-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8886-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - Handshake API;

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - OpenRISC architecture;

    - PowerPC architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Intel NPU Driver;

    - Android drivers;

    - Rados block device (RBD) driver;

    - Bluetooth drivers;

    - Hardware random number generator core;

    - TPM device driver;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - FireWire subsystem;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - CoreSight HW tracing drivers;

    - I2C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Mouse) drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - Fastrpc Driver;

    - Amazon Nitro Secure Module driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - Texas Instruments network drivers;

    - NTB driver;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - Parport drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - System reset/shutdown drivers;

    - PTP clock framework;

    - Voltage and Current Regulator drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - SPI subsystem;

    - Realtek RTL8723BS SDIO drivers;

    - VME bus staging drivers;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - DesignWare USB2 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Watchdog drivers;

    - 9P distributed file system;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - exFAT file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - Journaling layer for block devices (JBD2);

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - OCFS2 file system;

    - Proc file system;

    - SMB network file system;

    - Tracing file system;

    - UDF file system;

    - XFS file system;

    - Key management;

    - BPF subsystem;

    - Control group (cgroup);

    - Glob pattern matching library;

    - MAC80211 subsystem;

    - Mellanox drivers;

    - Networking core;

    - Network sockets;

    - IPv6 networking;

    - Bluetooth subsystem;

    - Wireless networking;

    - IPv4 networking;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - TCP network protocol;

    - XFRM subsystem;

    - RDMA verbs API;

    - io_uring subsystem;

    - IPC subsystem;

    - Audit subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - Kernel exit() syscall;

    - Kernel fork() syscall;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Resizable hashtable library;

    - Memory management;

    - 6LoWPAN network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Ceph Core library;

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IUCV driver;

    - KCM (Kernel Connection Multiplexor) sockets driver;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Open vSwitch;

    - Packet sockets;

    - Phonet protocol;

    - Qualcomm IPC Router (QRTR);

    - RDS protocol;

    - RxRPC session sockets;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - X.25 network layer;

    - eXpress Data Path;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - SELinux security module;

    - ALSA framework;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - Simple audio multiplexer codec driver;

    - Texas InstrumentS Audio (ASoC/HDA) drivers;

    - SoC Audio for Freescale CPUs drivers;

    - Amlogic Meson SoC drivers;

    - SOF drivers;

    - NVIDIA Tegra ASoC drivers;

    - USB sound devices;

    - Perf tools;

    - KVM subsystem; (CVE-2025-37807, CVE-2026-23265, CVE-2026-43022, CVE-2026-46321, CVE-2026-46322,     CVE-2026-52917, CVE-2026-52923, CVE-2026-52927, CVE-2026-52929, CVE-2026-52935, CVE-2026-52942,     CVE-2026-52943, CVE-2026-52947, CVE-2026-52994, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,     CVE-2026-53143, CVE-2026-53146, CVE-2026-53147, CVE-2026-53149, CVE-2026-53156, CVE-2026-53157,     CVE-2026-53160, CVE-2026-53161, CVE-2026-53184, CVE-2026-53189, CVE-2026-53194, CVE-2026-53195,     CVE-2026-53199, CVE-2026-53202, CVE-2026-53205, CVE-2026-53209, CVE-2026-53223, CVE-2026-53229,     CVE-2026-53253, CVE-2026-53255, CVE-2026-53267, CVE-2026-53268, CVE-2026-53272, CVE-2026-53329,     CVE-2026-53330, CVE-2026-53356, CVE-2026-53362, CVE-2026-53365, CVE-2026-53366, CVE-2026-53381,     CVE-2026-53383, CVE-2026-53387, CVE-2026-53388, CVE-2026-53389, CVE-2026-53390, CVE-2026-53391,     CVE-2026-53392, CVE-2026-53397, CVE-2026-53400, CVE-2026-53401, CVE-2026-53402, CVE-2026-63794,     CVE-2026-63802, CVE-2026-63803, CVE-2026-63805, CVE-2026-63806, CVE-2026-63809, CVE-2026-63812,     CVE-2026-63814, CVE-2026-63816, CVE-2026-63817, CVE-2026-63819, CVE-2026-63823, CVE-2026-63824,     CVE-2026-63827, CVE-2026-63833, CVE-2026-63867, CVE-2026-63869, CVE-2026-63870, CVE-2026-63875,     CVE-2026-63879, CVE-2026-63881, CVE-2026-63884, CVE-2026-63889, CVE-2026-63909, CVE-2026-63913,     CVE-2026-63920, CVE-2026-63925, CVE-2026-63927, CVE-2026-63930, CVE-2026-63942, CVE-2026-63954,     CVE-2026-63968, CVE-2026-63970, CVE-2026-63971, CVE-2026-63985, CVE-2026-64002, CVE-2026-64003,     CVE-2026-64004, CVE-2026-64005, CVE-2026-64009, CVE-2026-64017, CVE-2026-64023, CVE-2026-64026,     CVE-2026-64036, CVE-2026-64095, CVE-2026-64123, CVE-2026-64188, CVE-2026-64189, CVE-2026-64210,     CVE-2026-64222, CVE-2026-64239, CVE-2026-64242, CVE-2026-64243, CVE-2026-64245, CVE-2026-64246,     CVE-2026-64266, CVE-2026-64270, CVE-2026-64271, CVE-2026-64272, CVE-2026-64273, CVE-2026-64274,     CVE-2026-64276, CVE-2026-64277, CVE-2026-64279, CVE-2026-64283, CVE-2026-64286, CVE-2026-64287,     CVE-2026-64296, CVE-2026-64298, CVE-2026-64299, CVE-2026-64304, CVE-2026-64312, CVE-2026-64317,     CVE-2026-64318, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64333, CVE-2026-64368,     CVE-2026-64372, CVE-2026-64374, CVE-2026-64375, CVE-2026-64378, CVE-2026-64379, CVE-2026-64380,     CVE-2026-64388, CVE-2026-64389, CVE-2026-64395, CVE-2026-64398, CVE-2026-64401, CVE-2026-64402,     CVE-2026-64403, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413, CVE-2026-64418, CVE-2026-64420,     CVE-2026-64422, CVE-2026-64423, CVE-2026-64430, CVE-2026-64432, CVE-2026-64435, CVE-2026-64436,     CVE-2026-64440, CVE-2026-64442, CVE-2026-64443, CVE-2026-64444, CVE-2026-64448, CVE-2026-64449,     CVE-2026-64452, CVE-2026-64456, CVE-2026-64463, CVE-2026-64468, CVE-2026-64469, CVE-2026-64481,     CVE-2026-64496, CVE-2026-64524, CVE-2026-64532, CVE-2026-64533, CVE-2026-64536, CVE-2026-64539,     CVE-2026-64540, CVE-2026-64543, CVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64550,     CVE-2026-64556, CVE-2026-64560, CVE-2026-64563, CVE-2026-64567, CVE-2026-64568, CVE-2026-64570,     CVE-2026-64574, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64580, CVE-2026-64581,     CVE-2026-64582, CVE-2026-64583, CVE-2026-64584, CVE-2026-64585, CVE-2026-64599, CVE-2026-64600,     CVE-2026-68091, CVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68100, CVE-2026-68104,     CVE-2026-68106, CVE-2026-68107, CVE-2026-68108, CVE-2026-68116, CVE-2026-68118, CVE-2026-68119,     CVE-2026-68121, CVE-2026-68125, CVE-2026-68129, CVE-2026-68131, CVE-2026-68140, CVE-2026-68141,     CVE-2026-68142, CVE-2026-68143, CVE-2026-68145, CVE-2026-68148, CVE-2026-68149, CVE-2026-68153,     CVE-2026-68155, CVE-2026-68157, CVE-2026-68178, CVE-2026-68179, CVE-2026-68189, CVE-2026-68192,     CVE-2026-68196, CVE-2026-68199, CVE-2026-68202, CVE-2026-68204, CVE-2026-68216, CVE-2026-68219,     CVE-2026-68222, CVE-2026-68236, CVE-2026-68245, CVE-2026-68253, CVE-2026-68255, CVE-2026-68258,     CVE-2026-68260, CVE-2026-68262, CVE-2026-68263, CVE-2026-68266, CVE-2026-68273, CVE-2026-68284,     CVE-2026-68287, CVE-2026-68290, CVE-2026-68293, CVE-2026-68294, CVE-2026-68297, CVE-2026-68299,     CVE-2026-68314, CVE-2026-68315, CVE-2026-68320, CVE-2026-68322, CVE-2026-68323, CVE-2026-68326,     CVE-2026-68329, CVE-2026-68335, CVE-2026-68338, CVE-2026-68340, CVE-2026-68348, CVE-2026-68352,     CVE-2026-68353, CVE-2026-68354, CVE-2026-68370, CVE-2026-68371, CVE-2026-68373, CVE-2026-68376,     CVE-2026-68377, CVE-2026-68383, CVE-2026-68389, CVE-2026-68391, CVE-2026-68392, CVE-2026-68397,     CVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401, CVE-2026-68402, CVE-2026-68404,     CVE-2026-68408, CVE-2026-68409, CVE-2026-68414, CVE-2026-68417, CVE-2026-68419, CVE-2026-68425,     CVE-2026-68432, CVE-2026-68433, CVE-2026-68442, CVE-2026-68445, CVE-2026-68446, CVE-2026-68447,     CVE-2026-68451, CVE-2026-68452, CVE-2026-68453, CVE-2026-68454, CVE-2026-68466, CVE-2026-68467,     CVE-2026-68471, CVE-2026-68474, CVE-2026-68479, CVE-2026-72005, CVE-2026-72009, CVE-2026-72012,     CVE-2026-72019, CVE-2026-72021, CVE-2026-72024, CVE-2026-72029, CVE-2026-72035, CVE-2026-72036,     CVE-2026-72045, CVE-2026-72049, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053, CVE-2026-72054,     CVE-2026-72055, CVE-2026-72057, CVE-2026-72061, CVE-2026-72066, CVE-2026-72067, CVE-2026-72072,     CVE-2026-72089, CVE-2026-72099, CVE-2026-72102, CVE-2026-72105, CVE-2026-72107, CVE-2026-72108,     CVE-2026-72109, CVE-2026-72110, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116,     CVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122,     CVE-2026-72123, CVE-2026-72133, CVE-2026-72135, CVE-2026-72136, CVE-2026-72144, CVE-2026-72146,     CVE-2026-72148, CVE-2026-72149, CVE-2026-72157, CVE-2026-72160, CVE-2026-72162, CVE-2026-72164,     CVE-2026-72165, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72175, CVE-2026-72181,     CVE-2026-72195, CVE-2026-72196, CVE-2026-72197, CVE-2026-72213, CVE-2026-72225, CVE-2026-72227,     CVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72235, CVE-2026-72242, CVE-2026-72243,     CVE-2026-72244, CVE-2026-72247, CVE-2026-72250, CVE-2026-72252, CVE-2026-72253, CVE-2026-72254,     CVE-2026-72261, CVE-2026-72262, CVE-2026-72282, CVE-2026-72284, CVE-2026-72297, CVE-2026-72298,     CVE-2026-72301, CVE-2026-72302, CVE-2026-72304, CVE-2026-72310, CVE-2026-72312, CVE-2026-72314,     CVE-2026-72330, CVE-2026-72334, CVE-2026-72335, CVE-2026-72338, CVE-2026-72340, CVE-2026-72342,     CVE-2026-72343, CVE-2026-72347, CVE-2026-72350, CVE-2026-72352, CVE-2026-72369, CVE-2026-72371,     CVE-2026-72373, CVE-2026-72374, CVE-2026-72375, CVE-2026-72378, CVE-2026-72382, CVE-2026-72389,     CVE-2026-72390, CVE-2026-72397, CVE-2026-72400, CVE-2026-72404, CVE-2026-72405, CVE-2026-72406,     CVE-2026-72409, CVE-2026-72410, CVE-2026-72416, CVE-2026-72418, CVE-2026-72419, CVE-2026-72420,     CVE-2026-72423, CVE-2026-72425, CVE-2026-72427, CVE-2026-72435, CVE-2026-72438, CVE-2026-72440,     CVE-2026-72444, CVE-2026-72449, CVE-2026-72450, CVE-2026-72459, CVE-2026-72460, CVE-2026-72464,     CVE-2026-72469, CVE-2026-72470, CVE-2026-72476, CVE-2026-72478, CVE-2026-72480, CVE-2026-72483,     CVE-2026-72485, CVE-2026-72492, CVE-2026-72502, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258,     CVE-2026-74262, CVE-2026-74270, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74288,     CVE-2026-74289, CVE-2026-74292, CVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296,     CVE-2026-74297, CVE-2026-74300, CVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74317,     CVE-2026-74321, CVE-2026-74330, CVE-2026-74334, CVE-2026-74338, CVE-2026-74340, CVE-2026-74341,     CVE-2026-74344, CVE-2026-74347, CVE-2026-74349, CVE-2026-74356, CVE-2026-74359, CVE-2026-74363,     CVE-2026-74365, CVE-2026-74374, CVE-2026-74375, CVE-2026-74377, CVE-2026-74378, CVE-2026-74380,     CVE-2026-74385, CVE-2026-74387, CVE-2026-74388, CVE-2026-74390, CVE-2026-74397, CVE-2026-74438,     CVE-2026-74443, CVE-2026-74444, CVE-2026-74446, CVE-2026-74450, CVE-2026-74453, CVE-2026-74454,     CVE-2026-74456, CVE-2026-74461, CVE-2026-74465, CVE-2026-74467, CVE-2026-74469, CVE-2026-74470,     CVE-2026-74471, CVE-2026-74479, CVE-2026-74481, CVE-2026-74482, CVE-2026-74485, CVE-2026-74488,     CVE-2026-74490, CVE-2026-74492, CVE-2026-74496, CVE-2026-74497, CVE-2026-74507, CVE-2026-74508,     CVE-2026-74509, CVE-2026-74510, CVE-2026-74512, CVE-2026-74515, CVE-2026-74516, CVE-2026-74518,     CVE-2026-74519, CVE-2026-74522, CVE-2026-74523, CVE-2026-74527, CVE-2026-74530, CVE-2026-74531,     CVE-2026-74533, CVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74537, CVE-2026-74540,     CVE-2026-74544, CVE-2026-74548, CVE-2026-74549, CVE-2026-74550, CVE-2026-74551, CVE-2026-74557,     CVE-2026-74563, CVE-2026-74564, CVE-2026-74565, CVE-2026-74567, CVE-2026-74572, CVE-2026-74574,     CVE-2026-74575, CVE-2026-74578, CVE-2026-74579, CVE-2026-74580, CVE-2026-74581, CVE-2026-74582,     CVE-2026-74583, CVE-2026-74584, CVE-2026-74586, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589,     CVE-2026-74590, CVE-2026-74592, CVE-2026-74594, CVE-2026-74595, CVE-2026-74597, CVE-2026-74598,     CVE-2026-74601, CVE-2026-74603, CVE-2026-74604, CVE-2026-74605, CVE-2026-74606, CVE-2026-74607,     CVE-2026-74608, CVE-2026-74609, CVE-2026-74610, CVE-2026-74611, CVE-2026-74612, CVE-2026-74613,     CVE-2026-74614, CVE-2026-74615, CVE-2026-74616, CVE-2026-74621, CVE-2026-74624, CVE-2026-74625,     CVE-2026-74626, CVE-2026-74628, CVE-2026-74630, CVE-2026-74631, CVE-2026-74632, CVE-2026-74634,     CVE-2026-74635, CVE-2026-74637, CVE-2026-74641, CVE-2026-74646, CVE-2026-74647, CVE-2026-74648,     CVE-2026-74649, CVE-2026-74651, CVE-2026-74656, CVE-2026-74660, CVE-2026-74661, CVE-2026-74662,     CVE-2026-74663, CVE-2026-74666, CVE-2026-74667, CVE-2026-74668, CVE-2026-74669, CVE-2026-74670,     CVE-2026-74675, CVE-2026-74678, CVE-2026-74684, CVE-2026-74687, CVE-2026-74688, CVE-2026-74689,     CVE-2026-74690, CVE-2026-74691, CVE-2026-74692, CVE-2026-74695, CVE-2026-74696, CVE-2026-74697,     CVE-2026-74700, CVE-2026-74701, CVE-2026-74704, CVE-2026-74705, CVE-2026-74710, CVE-2026-74711,     CVE-2026-74713, CVE-2026-74714, CVE-2026-74715, CVE-2026-74717, CVE-2026-74720, CVE-2026-74723,     CVE-2026-74724, CVE-2026-74725, CVE-2026-74726, CVE-2026-74730, CVE-2026-74733, CVE-2026-74736,     CVE-2026-74737, CVE-2026-74739, CVE-2026-74743, CVE-2026-74744, CVE-2026-74746, CVE-2026-74747,     CVE-2026-74748, CVE-2026-74752, CVE-2026-80521, CVE-2026-80526, CVE-2026-80527, CVE-2026-80528,     CVE-2026-80536, CVE-2026-80540, CVE-2026-80541, CVE-2026-80547, CVE-2026-80548, CVE-2026-80549,     CVE-2026-80550, CVE-2026-80551, CVE-2026-80552, CVE-2026-80553, CVE-2026-80554, CVE-2026-80555,     CVE-2026-80556, CVE-2026-80557, CVE-2026-80558, CVE-2026-80559, CVE-2026-80560, CVE-2026-80561,     CVE-2026-80565, CVE-2026-80568, CVE-2026-80569, CVE-2026-80570, CVE-2026-80572, CVE-2026-80574,     CVE-2026-80576, CVE-2026-80578, CVE-2026-80579, CVE-2026-80580, CVE-2026-80583, CVE-2026-80584,     CVE-2026-80585, CVE-2026-80586, CVE-2026-80587, CVE-2026-80589, CVE-2026-80721, CVE-2026-80901,     CVE-2026-97509)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5121-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

    The following security issues were fixed:

    - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree     (bsc#1252918).
    - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703 bsc#1275737).
    - CVE-2026-23059: scsi: qla2xxx: Sanitize payload size to prevent member overflow (bsc#1257737     bsc#1275737).
    - CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
    - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805).
    - CVE-2026-64379: smb: client: mask server-provided mode to 07777 in modefromsid (bsc#1273029).
    - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082).
    - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
    - CVE-2026-64539: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD (bsc#1273338).
    - CVE-2026-64546: drm/edid: fix OOB read in drm_parse_tiled_block() (bsc#1273334).
    - CVE-2026-64549: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() (bsc#1273341).
    - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag     (bsc#1277663).
    - CVE-2026-72310: smb: client: fix overflow in passthrough ioctl bounds check (bsc#1277750).
    - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041).
    - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050).
    - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044).
    - CVE-2026-74683: Input: evdev - sanitize event type index when fetching event masks (bsc#1277387).
    - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574).
    - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578).
    - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338).
    - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260).
    - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343).
    - CVE-2026-80704: drm/amd/display: use proper context for logging (bsc#1278431).
    - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836).
    - CVE-2026-80764: Bluetooth: hci_event: fix LE list UAF on reset (bsc#1279493).
    - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795).
    - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606).
    - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494).
    - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496).
    - CVE-2026-80888: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import (bsc#1279455).
    - CVE-2026-80978: net: cap advertised IP tunnel headroom (bsc#1280253).
    - CVE-2026-80989: net: thunderbolt: Mark the connection down when bringing it up fails (bsc#1280305).
    - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520).
    - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569).
    - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713).
    - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554).
    - CVE-2026-89606: ecryptfs: reject too-small tag 70 packets (bsc#1280469).
    - CVE-2026-89607: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet (bsc#1281792).
    - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826).
    - CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).
    - CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042).
    - CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions     (bsc#1281046).
    - CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950).
    - CVE-2026-89642: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (bsc#1280970).
    - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563).
    - CVE-2026-89821: drm/amd/display: avoid divide-by-zero in __is_lut_linear() (bsc#1280996).
    - CVE-2026-89842: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737 bsc#1281189).
    - CVE-2026-89843: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737 bsc#1280984).
    - CVE-2026-89844: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition     (bsc#1275737       bsc#1281183).
    - CVE-2026-89845: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737     bsc#1281001).
    - CVE-2026-89846: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737     bsc#1281184).
    - CVE-2026-89847: scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737 bsc#1281185).
    - CVE-2026-89848: scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737     bsc#1281179).
    - CVE-2026-89849: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737 bsc#1281180).
    - CVE-2026-89850: scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737 bsc#1281181).
    - CVE-2026-89851: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737 bsc#1281175).
    - CVE-2026-89852: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737     bsc#1281174).
    - CVE-2026-89853: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737     bsc#1281173).
    - CVE-2026-89854: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737 bsc#1281165).
    - CVE-2026-89855: scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737 bsc#1281164).
    - CVE-2026-89857: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737 bsc#1281211).
    - CVE-2026-89858: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737     bsc#1281334).
    - CVE-2026-89859: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737     bsc#1281333).
    - CVE-2026-89860: scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737 bsc#1281357).
    - CVE-2026-89861: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737     bsc#1281353).
    - CVE-2026-89862: scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737     bsc#1281214).
    - CVE-2026-89863: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737     bsc#1281251).
    - CVE-2026-89864: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737 bsc#1281253).
    - CVE-2026-89865: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737 bsc#1281254).
    - CVE-2026-90015: xhci: fix lost bounce buffers on TDs spanning several ring segments (bsc#1281080).
    - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650).
    - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490).
    - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538).
    - CVE-2026-90125: smb: client: fix request buffer leak in smb2_new_read_req() (bsc#1281580).
    - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535).
    - CVE-2026-90227: nvme: fine-granular CAP_SYS_ADMIN for nvme io commands (bsc#1281705).
    - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).
    - CVE-2026-93210: smb: client: harden DFS cache against invalid target hints (bsc#1282737).
    - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778).
    - CVE-2026-93242: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737     bsc#1282684).
    - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004).
    - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).
    - CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869).
    - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir     (bsc#1282932).
    - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017).
    - CVE-2026-97527: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737     bsc#1283343).
    - CVE-2026-97528: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737     bsc#1283360).
    - CVE-2026-97530: scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737     bsc#1283159).
    - CVE-2026-97531: scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737     bsc#1283834).
    - CVE-2026-97535: scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737     bsc#1283837).
    - CVE-2026-97537: scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737     bsc#1283453).
    - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967).
    - CVE-2026-97926: ufs: validate cylinder group metadata before caching it (bsc#1283887).
    - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113).
    - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963).
    - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668).
    - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810).
    - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842).
    - CVE-2026-98072: net/rds: use wq_has_sleeper() in release_in_xmit() (bsc#1283846).
    - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves     (bsc#1283871).
    - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150).
    - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921).
    - CVE-2026-98116: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (bsc#1283878).
    - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933).
    - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346).
    - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360).
    - CVE-2026-98386: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737     bsc#1285668).
    - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).

    The following non security issues were fixed:

    - net/rds: use clear_bit_unlock() in release_refill() (git-fixes).
    - nvmet-tcp: do not continue for invalid icreq (git-fixes).
    - ocfs2: reserve xattr value tree metadata only once (git-fixes).
    - rds: add missing barrier to release_refill (git-fixes).
    - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337).
              - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
330247	Linux Distros Unpatched Vulnerability : CVE-2026-64539	Nessus	Misc.	2026/7/28	2026/11/13	high
331409	Debian dsa-6405 : ata-modules-6.12.100+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	2026/7/31	2026/9/23	high
365522	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8917-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium
347900	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:4254-1)	Nessus	SuSE Local Security Checks	2026/9/18	2026/11/13	high
365457	Ubuntu 24.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8886-1)	Nessus	Ubuntu Local Security Checks	2026/10/13	2026/10/13	high
377663	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:5121-1)	Nessus	SuSE Local Security Checks	2026/11/9	2026/11/9	high
365463	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8889-1)	Nessus	Ubuntu Local Security Checks	2026/10/13	2026/10/13	medium

偵測

搜尋 Plugin

high

high

medium

high

high

high

medium