The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4475 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4475-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     February 10, 2026                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.249-1     CVE ID         : CVE-2022-48744 CVE-2022-49168 CVE-2022-49465 CVE-2022-49711                      CVE-2022-49743 CVE-2023-52975 CVE-2023-54207 CVE-2023-54321                      CVE-2024-36903 CVE-2024-36927 CVE-2025-22022 CVE-2025-22121                      CVE-2025-37830 CVE-2025-38022 CVE-2025-38119 CVE-2025-38556                      CVE-2025-38591 CVE-2025-39702 CVE-2025-40110 CVE-2025-40215                      CVE-2025-68211 CVE-2025-68255 CVE-2025-68257 CVE-2025-68258                      CVE-2025-68261 CVE-2025-68264 CVE-2025-68266 CVE-2025-68282                      CVE-2025-68325 CVE-2025-68332 CVE-2025-68336 CVE-2025-68337                      CVE-2025-68344 CVE-2025-68346 CVE-2025-68349 CVE-2025-68354                      CVE-2025-68362 CVE-2025-68364 CVE-2025-68366 CVE-2025-68367                      CVE-2025-68372 CVE-2025-68724 CVE-2025-68725 CVE-2025-68733                      CVE-2025-68740 CVE-2025-68757 CVE-2025-68758 CVE-2025-68759                      CVE-2025-68764 CVE-2025-68767 CVE-2025-68769 CVE-2025-68771                      CVE-2025-68773 CVE-2025-68774 CVE-2025-68776 CVE-2025-68777                      CVE-2025-68782 CVE-2025-68783 CVE-2025-68785 CVE-2025-68787                      CVE-2025-68788 CVE-2025-68795 CVE-2025-68796 CVE-2025-68797                      CVE-2025-68799 CVE-2025-68800 CVE-2025-68801 CVE-2025-68803                      CVE-2025-68804 CVE-2025-68808 CVE-2025-68813 CVE-2025-68815                      CVE-2025-68816 CVE-2025-68818 CVE-2025-68819 CVE-2025-68820                      CVE-2025-71064 CVE-2025-71066 CVE-2025-71069 CVE-2025-71075                      CVE-2025-71077 CVE-2025-71079 CVE-2025-71084 CVE-2025-71085                      CVE-2025-71086 CVE-2025-71087 CVE-2025-71091 CVE-2025-71093                      CVE-2025-71096 CVE-2025-71097 CVE-2025-71098 CVE-2025-71102                      CVE-2025-71104 CVE-2025-71105 CVE-2025-71108 CVE-2025-71111                      CVE-2025-71112 CVE-2025-71113 CVE-2025-71114 CVE-2025-71116                      CVE-2025-71118 CVE-2025-71120 CVE-2025-71123 CVE-2025-71125                      CVE-2025-71127 CVE-2025-71131 CVE-2025-71136 CVE-2025-71137                      CVE-2025-71154 CVE-2025-71162 CVE-2025-71182 CVE-2025-71185                      CVE-2025-71186 CVE-2025-71190 CVE-2025-71191 CVE-2025-71194                      CVE-2025-71196 CVE-2025-71197 CVE-2025-71199 CVE-2026-22976                      CVE-2026-22977 CVE-2026-22978 CVE-2026-22980 CVE-2026-22990                      CVE-2026-22991 CVE-2026-22997 CVE-2026-22998 CVE-2026-22999                      CVE-2026-23001 CVE-2026-23003 CVE-2026-23011 CVE-2026-23020                      CVE-2026-23021 CVE-2026-23033 CVE-2026-23038 CVE-2026-23047                      CVE-2026-23049 CVE-2026-23056 CVE-2026-23058 CVE-2026-23060                      CVE-2026-23061 CVE-2026-23063 CVE-2026-23064 CVE-2026-23071                      CVE-2026-23073 CVE-2026-23074 CVE-2026-23075 CVE-2026-23076                      CVE-2026-23080 CVE-2026-23083 CVE-2026-23084 CVE-2026-23085                      CVE-2026-23087 CVE-2026-23089 CVE-2026-23090 CVE-2026-23091                      CVE-2026-23095 CVE-2026-23096 CVE-2026-23097 CVE-2026-23098                      CVE-2026-23101 CVE-2026-23103 CVE-2026-23105 CVE-2026-23108                      CVE-2026-23110     Debian Bug     : 1122193 1123750

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.249-1.  This update also fixes several bugs reported to Debian.
    It additionally includes many more bug fixes from stable updates     5.10.248 and 5.10.249.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1430 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: reject duplicate device on updates (CVE-2025-38678)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix refcount leak in nfsd_set_fh_dentry() (CVE-2025-40212)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: Initialise scc_index in unix_add_edge(). (CVE-2025-40214)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: delete x->tunnel as we delete x (CVE-2025-40215)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Ignore signal/timeout on connect() if already established (CVE-2025-40248)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Clean up only new IRQ glue on request_irq() failure (CVE-2025-40250)

    In the Linux kernel, the following vulnerability has been resolved:

    devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: remove never-working support for setting nsh fields (CVE-2025-40254)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix a race in mptcp_pm_del_add_timer() (CVE-2025-40257)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Do not sleep in atomic context (CVE-2025-40259)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Check the untrusted offset in FF-A memory share (CVE-2025-40266)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: client: fix memory leak in smb3_fs_context_parse_param (CVE-2025-40268)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix uaf in proc_readdir_de() (CVE-2025-40271)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/secretmem: fix use-after-free race in fault handler (CVE-2025-40272)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: free copynotify stateid in nfs4_free_ol_stateid() (CVE-2025-40273)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (CVE-2025-40274)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (CVE-2025-40279)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (CVE-2025-40281)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix improper check of dentry.stream.valid_size (CVE-2025-40287)

    In the Linux kernel, the following vulnerability has been resolved:

    crash: fix crashkernel resource shrink (CVE-2025-68198)

    In the Linux kernel, the following vulnerability has been resolved:

    codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext (CVE-2025-68199)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Add bpf_prog_run_data_pointers() (CVE-2025-68200)

    In the Linux kernel, the following vulnerability has been resolved:

    sched_ext: Fix unsafe locking in the scx_dump_state() (CVE-2025-68202)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: account for current allocated stack depth in widen_imprecise_scalars() (CVE-2025-68208)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: avoid infinite loop due to incomplete zstd-compressed data (CVE-2025-68210)

    In the Linux kernel, the following vulnerability has been resolved:

    timers: Fix NULL function pointer race in timer_shutdown_sync() (CVE-2025-68214)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: fix memory leak in smb3_fs_context_parse_param error path (CVE-2025-68219)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix incomplete backport in cfids_invalidation_worker() (CVE-2025-68226)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: Fix proto fallback detection with BPF (CVE-2025-68227)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (CVE-2025-68229)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/mempool: fix poisoning order>0 pages with HIGHMEM (CVE-2025-68231)

    In the Linux kernel, the following vulnerability has been resolved:

    mtdchar: fix integer overflow in read/write ioctls (CVE-2025-68237)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (CVE-2025-68241)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix LTP test failures when timestamps are delegated (CVE-2025-68242)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (CVE-2025-68244)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (CVE-2025-68259)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (CVE-2025-68261)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: refresh inline data size before write operations (CVE-2025-68264)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: fix admin request_queue lifetime (CVE-2025-68265)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: storage: Fix memory leak in USB bulk transport (CVE-2025-68288)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/memfd: fix information leak in hugetlb folios (CVE-2025-68292)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/huge_memory: fix NULL pointer deference when splitting folio (CVE-2025-68293)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix memory leak in cifs_construct_tcon() (CVE-2025-68295)

    In the Linux kernel, the following vulnerability has been resolved:

    drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (CVE-2025-68296)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix crash in process_v2_sparse_read() for encrypted directories (CVE-2025-68297)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CVE-2025-68325)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (CVE-2025-68329)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer     (CVE-2025-68331)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (CVE-2025-68337)

    In the Linux kernel, the following vulnerability has been resolved:

    team: Move team device type change at the end of team_port_add (CVE-2025-68340)

    In the Linux kernel, the following vulnerability has been resolved:

    veth: reduce XDP no_direct return section to fix race (CVE-2025-68341)

    In the Linux kernel, the following vulnerability has been resolved:

    block: fix memory leak in __blkdev_issue_zero_pages (CVE-2025-68348)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)

    In the Linux kernel, the following vulnerability has been resolved:

    erofs: limit the level of fs stacking for file-backed mounts (CVE-2025-68361)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Check skb->transport_header is set in bpf_skb_check_mtu (CVE-2025-68363)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: init run lock for extend inode (CVE-2025-68369)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: smartpqi: Fix device resources accessed after device removal (CVE-2025-68371)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: defer config put in recv_work (CVE-2025-68372)

    In the Linux kernel, the following vulnerability has been resolved:

    md: fix rcu protection in md_wakeup_thread (CVE-2025-68374)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix stackmap overflow check in __bpf_get_stackid() (CVE-2025-68378)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: Fix uninit buffer allocated by __getname() (CVE-2025-68727)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: fix uninit memory after failed mi_read in mi_format_new (CVE-2025-68728)

    In the Linux kernel, the following vulnerability has been resolved:

    ima: Handle error code returned by ima_filter_rule_match() (CVE-2025-68740)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix invalid prog->stats access when update_effective_progs fails (CVE-2025-68742)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Free special fields when update [lru_,]percpu_hash maps (CVE-2025-68744)

    In the Linux kernel, the following vulnerability has been resolved:

    spi: tegra210-quad: Fix timeout handling (CVE-2025-68746)

    In the Linux kernel, the following vulnerability has been resolved:

    block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (CVE-2025-68756)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (CVE-2025-68764)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8243-1 advisory.

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM).
    An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor     profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege     escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403,     CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409,     CVE-2026-23410, CVE-2026-23411)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - Nios II architecture;

    - PowerPC architecture;

    - Sun Sparc architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - ATM drivers;

    - Drivers core;

    - Network block device driver;

    - Bluetooth drivers;

    - Bus devices;

    - Character device driver;

    - Hardware random number generator core;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Counter interface drivers;

    - CPU frequency scaling framework;

    - DMA engine subsystem;

    - Intel Stratix 10 firmware drivers;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - CoreSight HW tracing drivers;

    - Intel Trace Hub HW tracing drivers;

    - IIO subsystem;

    - IIO ADC drivers;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - Input Device (Tablet) drivers;

    - IRQ chip drivers;

    - ISDN/mISDN subsystem;

    - Modular ISDN driver;

    - LED subsystem;

    - Macintosh device drivers;

    - Multiple devices driver;

    - Media drivers;

    - UACCE accelerator framework;

    - MOST (Media Oriented Systems Transport) drivers;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - Texas Instruments network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - PA-RISC drivers;

    - PCI subsystem;

    - Performance monitor drivers;

    - PHY drivers;

    - Pin controllers subsystem;

    - Chrome hardware platform drivers;

    - x86 platform drivers;

    - ARM PM domains;

    - PPS (Pulse Per Second) driver;

    - PWM drivers;

    - Voltage and Current Regulator drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - Texas Instruments SoC drivers;

    - SPI subsystem;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Userspace I/O drivers;

    - Cadence USB3 driver;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Mass Storage drivers;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - W1 Dallas's 1-wire bus driver;

    - Watchdog drivers;

    - Xen hypervisor drivers;

    - BFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS file system;

    - HFS+ file system;

    - HugeTLB file system;

    - Journaling layer for block devices (JBD2);

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - Proc file system;

    - SMB network file system;

    - SquashFS file system;

    - UDF file system;

    - XFS file system;

    - BPF subsystem;

    - Ethernet bridge;

    - Memory management;

    - padata parallel execution mechanism;

    - IP tunnels definitions;

    - NFC subsystem;

    - Network traffic control;

    - Network sockets;

    - XFRM subsystem;

    - io_uring subsystem;

    - Control group (cgroup);

    - IRQ subsystem;

    - Locking primitives;

    - Padata parallel execution mechanism;

    - PID allocator;

    - Scheduler infrastructure;

    - Shadow Call Stack mechanism;

    - Tracing infrastructure;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAIF protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - Ethtool driver;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - Open vSwitch;

    - RF switch subsystem;

    - Rose network layer;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - Rust bindings mechanism;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - Turtle Beach Wavefront ALSA driver;

    - Creative Sound Blaster X-Fi driver;

    - Intel ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520, CVE-2023-53662,     CVE-2023-54207, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830,     CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011, CVE-2025-21780,     CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111, CVE-2025-22121, CVE-2025-23143,     CVE-2025-37849, CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129, CVE-2025-38232,     CVE-2025-38236, CVE-2025-38248, CVE-2025-38408, CVE-2025-38556, CVE-2025-38584, CVE-2025-38591,     CVE-2025-39869, CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883, CVE-2025-39885,     CVE-2025-39907, CVE-2025-39911, CVE-2025-39913, CVE-2025-39923, CVE-2025-39934, CVE-2025-39937,     CVE-2025-39943, CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953, CVE-2025-39955,     CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970, CVE-2025-39971, CVE-2025-39972,     CVE-2025-39973, CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987, CVE-2025-39988,     CVE-2025-39994, CVE-2025-39995, CVE-2025-39996, CVE-2025-39998, CVE-2025-40001, CVE-2025-40006,     CVE-2025-40011, CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027, CVE-2025-40029,     CVE-2025-40030, CVE-2025-40035, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044,     CVE-2025-40048, CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060, CVE-2025-40068,     CVE-2025-40070, CVE-2025-40078, CVE-2025-40081, CVE-2025-40083, CVE-2025-40085, CVE-2025-40087,     CVE-2025-40088, CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106, CVE-2025-40109,     CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40115, CVE-2025-40116, CVE-2025-40118,     CVE-2025-40120, CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126, CVE-2025-40127,     CVE-2025-40134, CVE-2025-40140, CVE-2025-40149, CVE-2025-40153, CVE-2025-40154, CVE-2025-40164,     CVE-2025-40167, CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179, CVE-2025-40183,     CVE-2025-40187, CVE-2025-40188, CVE-2025-40194, CVE-2025-40200, CVE-2025-40204, CVE-2025-40205,     CVE-2025-40211, CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223, CVE-2025-40231,     CVE-2025-40233, CVE-2025-40240, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245, CVE-2025-40248,     CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259,     CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271,     CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279,     CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306,     CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315,     CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322, CVE-2025-40324, CVE-2025-40331,     CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349, CVE-2025-40351,     CVE-2025-40360, CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185,     CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68211,     CVE-2025-68217, CVE-2025-68220, CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241,     CVE-2025-68244, CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68257,     CVE-2025-68258, CVE-2025-68261, CVE-2025-68264, CVE-2025-68266, CVE-2025-68282, CVE-2025-68284,     CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290,     CVE-2025-68295, CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68308, CVE-2025-68312,     CVE-2025-68321, CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330, CVE-2025-68331,     CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68340,     CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68364,     CVE-2025-68365, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724, CVE-2025-68725,     CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740,     CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765,     CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777,     CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788,     CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,     CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,     CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-71064,     CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,     CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085,     CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096,     CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108,     CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118,     CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132,     CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71162,     CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186, CVE-2025-71188,     CVE-2025-71190, CVE-2025-71191, CVE-2025-71194, CVE-2025-71196, CVE-2025-71197, CVE-2025-71199,     CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984,     CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999,     CVE-2026-23001, CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021,     CVE-2026-23026, CVE-2026-23033, CVE-2026-23037, CVE-2026-23038, CVE-2026-23047, CVE-2026-23049,     CVE-2026-23056, CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063, CVE-2026-23064,     CVE-2026-23071, CVE-2026-23073, CVE-2026-23074, CVE-2026-23075, CVE-2026-23076, CVE-2026-23078,     CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087, CVE-2026-23089,     CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097,     CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105, CVE-2026-23108,     CVE-2026-23111, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23124, CVE-2026-23125,     CVE-2026-23128, CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164, CVE-2026-23167,     CVE-2026-23170, CVE-2026-23209)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
348006	EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2026-3424)	Nessus	Huawei Local Security Checks	2026/9/18	2026/10/22	critical
297194	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:0315-1)	Nessus	SuSE Local Security Checks	2026/1/30	2026/9/29	high
298680	Debian dla-4475 : ata-modules-5.10.0-35-armmp-di - security update	Nessus	Debian Local Security Checks	2026/2/11	2026/3/23	high
299530	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1430)	Nessus	Amazon Linux Local Security Checks	2026/2/19	2026/3/9	medium
314224	Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8243-1)	Nessus	Ubuntu Local Security Checks	2026/5/11	2026/5/11	high
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	2026/7/24	2026/11/14	high

偵測

搜尋 Plugin

critical

high

high

medium

high

high