Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 已解決 Linux 核心中的下列弱點：tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns everywhere except the fully-qualified VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can reach the truncation path. Keep the length check but leave field_name as on overflow. (CVE-2026-64028)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns everywhere except the fully-qualified VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can reach the truncation path. Keep the length check but leave field_name as on overflow. (CVE-2026-64028)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns everywhere except the fully-qualified VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can reach the truncation path. Keep the length check but leave field_name as on overflow. (CVE-2026-64028)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from     hist_field_name() on truncation hist_field_name() returns  everywhere except the fully-qualified     VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL-> guard.
    Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the     strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bounded by     MAX_EVENT_NAME_LEN, but the field name on a VAR_REF is kstrdup'd from a histogram variable name parsed out     of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can     reach the truncation path. Keep the length check but leave field_name as  on overflow. (CVE-2026-64028)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
328194	Linux Distros 未修補弱點：CVE-2026-64028	Nessus	Misc.	2026/7/20	2026/10/14	medium
328194	Linux Distros 未修补的漏洞：CVE-2026-64028	Nessus	Misc.	2026/7/20	2026/10/14	medium
328194	Linux Distros のパッチ未適用の脆弱性: CVE-2026-64028	Nessus	Misc.	2026/7/20	2026/10/14	medium
364837	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4241)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
328194	Linux Distros Unpatched Vulnerability : CVE-2026-64028	Nessus	Misc.	2026/7/20	2026/10/14	medium
364821	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4057)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
364867	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4148)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
364820	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high

偵測

搜尋 Plugin

medium

medium

medium

high

medium

high

high

high