CentOS Linux 6 主機安裝的套件會受到 TuxCare CENTOS6：CLSA-2026：1792975902 公告中提及的多個弱點影響。

  - 已解決 Linux 核心中的下列弱點：hwrng: geode - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing pci_dev_put() for the normal and error path.
    (CVE-2022-50659)

  - 已解決 Linux 核心中的下列弱點：ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN:
    ================================================================== BUG: KASAN: use-after-free in ubi_eba_copy_table+0x11f/0x1c0 [ubi] Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735 CPU: 2 PID: 4735 Comm: ubirsvol Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report+0x171/0x472 kasan_report+0xad/0x130 ubi_eba_copy_table+0x11f/0x1c0 [ubi] ubi_resize_volume+0x4f9/0xbc0 [ubi] ubi_cdev_ioctl+0x701/0x1850 [ubi] __x64_sys_ioctl+0x11d/0x170 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 </TASK> When ubi_change_vtbl_record() returns an error in ubi_resize_volume(), new_eba_tbl will be freed on error handing path, but it is holded by vol->eba_tbl in ubi_eba_replace_table(). It means that the liftcycle of vol->eba_tbl and vol are different, so when resizing volume in next time, it causing an use-after-free fault. Fix it by not freeing new_eba_tbl after it replaced in ubi_eba_replace_table(), while will be freed in next volume resizing. (CVE-2023-53800)

  - 已解決 Linux 核心中的下列弱點：media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range.
    The final length we pass to av7110_ipack_instant_repack() is len - (buf[4] + 1) - 4 so add a check to ensure that the length is not negative. It's not clear that passing a negative len value does anything bad necessarily, but it's not best practice. With the new bounds checking the if (!len) condition is no longer possible or required so remove that. (CVE-2023-54284)

  - 已解決 Linux 核心中的下列弱點：ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally reproduces a warning in ext4_put_super() associated with the dirty clusters count: WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324 ext4_put_super+0x48c/0x590 [ext4] Tracing the failure shows that the warning fires due to an s_dirtyclusters_counter value of -1. IOW, this appears to be a spurious decrement as opposed to some sort of leak. Further tracing of the dirty cluster count deltas and an LLM scan of the resulting output identified the cause as a double decrement in the error path between ext4_mb_mark_diskspace_used() and the caller ext4_mb_new_blocks(). First, note that generic/388 is a shutdown vs. fsstress test and so produces a random set of operations and shutdown injections. In the problematic case, the shutdown triggers an error return from the ext4_handle_dirty_metadata() call(s) made from ext4_mb_mark_context(). The changed value is non-zero at this point, so ext4_mb_mark_diskspace_used() does not exit after the error bubbles up from ext4_mb_mark_context(). Instead, the former decrements both cluster counters and returns the error up to ext4_mb_new_blocks(). The latter falls into the !ar->len out path which decrements the dirty clusters counter a second time, creating the inconsistency. To avoid this problem and simplify ownership of the cluster reservation in this codepath, lift the counter reduction to a single place in the caller. This makes it more clear that ext4_mb_new_blocks() is responsible for acquiring cluster reservation (via ext4_claim_free_clusters()) in the !delalloc case as well as releasing it, regardless of whether it ends up consumed or returned due to failure. (CVE-2026-45920)

  - 已解決 Linux 核心中的下列弱點：wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index. (CVE-2026-46122)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 藍牙：L2CAP：在控制和 FCS 存取 l2cap_data_rcv（） 解壓縮 2 位元組或 4 位元組控制欄位之前驗證幀長度，而無需先確保該欄位存在。因此，短 ERTM 或串流模式框架可能會導致越界讀取。啟用時 CRC16 有第二個短幀情況。拉取控制欄位後，l2cap_check_fcs（） 從 skb->len 中減去 2，而不檢查它。如果剩餘的位元組少於兩個位元組，則減法換行;skb_trim（）使緩衝區保持不變，後續FCS負載讀取超過幀的邏輯端。在存取任一欄位之前，驗證框架是否包含其控制欄位及其FCS（啟用時）。（CVE-2026-98457）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

遠端 Debian 12 主機安裝的套件會受到 dla-4850 公告中提及的多個弱點影響。

    ------------------------------------------------------------------------- Debian LTS 公告 DLA-4850-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Ben Hutchings 2026 年 10 月 22 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    套件 ： linux-6.12 版本 ： 6.12.113-1~deb12u1 CVE ID ： CVE-2025-38204 CVE-2025-40158 CVE-2026-52988 CVE-2026-72315 CVE-2026-72463 CVE-2026-74347 CVE-2026-80935 CVE-2026-80937 CVE-2026-80939 CVE-2026-80980 CVE-2026-81016 CVE-2026-89437 CVE-2026-89441 CVE-2026-89445 CVE-2026-89452 CVE-2026-89467 CVE-2026-89500 CVE-2026-89503 CVE-2026-89520 CVE-2026-89527 CVE-2026-89633 CVE-2026-89638 CVE-2026-89766 CVE-2026-89795 CVE-2026-89797 CVE-2026-89806 CVE-2026-89827 CVE-2026-89832 CVE-2026-89837 CVE-2026-89838 CVE-2026-89840 CVE-2026-89859 CVE-2026-89868 CVE-2026-89912 CVE-2026-89921 CVE-2026-89956 CVE-2026-89971 CVE-2026-89972 CVE-2026-89996 CVE-2026-90002 CVE-2026-90013 CVE-2026-90016 CVE-2026-90023 CVE-2026-90029 CVE-2026-90030 CVE-2026-90146 CVE-2026-93179 CVE-2026-93196 CVE-2026-93199 CVE-2026-93200 CVE-2026-93231 CVE-2026-93243 CVE-2026-93244 CVE-2026-93285 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97534 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97549 CVE-2026-97558 CVE-2026-97559 CVE-2026-97566 CVE-2026-97567 CVE-2026-97571 CVE-2026-97574 CVE-2026-97594 CVE-2026-97597 CVE-2026-97603 CVE-2026-97609 CVE-2026-97615 CVE-2026-97618 CVE-2026-97619 CVE-2026-97620 CVE-2026-97901 CVE-2026-97906 CVE-2026-97918 CVE-2026-97919 CVE-2026-97933 CVE-2026-97934 CVE-2026-97935 CVE-2026-97938 CVE-2026-97939 CVE-2026-97949 CVE-2026-97950 CVE-2026-98101 CVE-2026-98161 CVE-2026-98167 CVE-2026-98168 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98172 CVE-2026-98173 CVE-2026-98174 CVE-2026-98175 CVE-2026-98179 CVE-2026-98181 CVE-2026-98182 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98192 CVE-2026-98193 CVE-2026-98194 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98198 CVE-2026-98199 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98214 CVE-2026-98215 CVE-2026-98216 CVE-2026-98217 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98229 CVE-2026-98230 CVE-2026-98231 CVE-2026-98232 CVE-2026-98233 CVE-2026-98234 CVE-2026-98235 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98239 CVE-2026-98241 CVE-2026-98245 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98251 CVE-2026-98252 CVE-2026-98253 CVE-2026-98254 CVE-2026-98255 CVE-2026-98257 CVE-2026-98260 CVE-2026-98261 CVE-2026-98262 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98267 CVE-2026-98269 CVE-2026-98270 CVE-2026-98271 CVE-2026-98272 CVE-2026-98275 CVE-2026-98276 CVE-2026-98282 CVE-2026-98283 CVE-2026-98287 CVE-2026-98290 CVE-2026-98291 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98299 CVE-2026-98300 CVE-2026-98301 CVE-2026-98302 CVE-2026-98303 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98320 CVE-2026-98322 CVE-2026-98323 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98347 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98352 CVE-2026-98354 CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360 CVE-2026-98362 CVE-2026-98363 CVE-2026-98365 CVE-2026-98366 CVE-2026-98367 CVE-2026-98368 CVE-2026-98369 CVE-2026-98370 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98377 CVE-2026-98378 CVE-2026-98379 CVE-2026-98380 CVE-2026-98381 CVE-2026-98382 CVE-2026-98383 CVE-2026-98384 CVE-2026-98386 CVE-2026-98403 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98413 CVE-2026-98416 CVE-2026-98417 CVE-2026-98419 CVE-2026-98421 CVE-2026-98422 CVE-2026-98423 CVE-2026-98425 CVE-2026-98426 CVE-2026-98428 CVE-2026-98429 CVE-2026-98430 CVE-2026-98432 CVE-2026-98433 CVE-2026-98435 CVE-2026-98440 CVE-2026-98441 CVE-2026-98442 CVE-2026-98443 CVE-2026-98445 CVE-2026-98448 CVE-2026-98450 CVE-2026-98451 CVE-2026-98452 CVE-2026-98453 CVE-2026-98454 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98464 CVE-2026-98465 CVE-2026-98468 CVE-2026-98473 CVE-2026-98475 CVE-2026-98476 CVE-2026-98477 CVE-2026-98479 CVE-2026-98481 CVE-2026-98482 CVE-2026-98483 CVE-2026-98484 CVE-2026-98485 CVE-2026-98486 CVE-2026-98487 CVE-2026-98488 CVE-2026-98489 CVE-2026-98490 CVE-2026-98491 CVE-2026-98493 CVE-2026-98494 CVE-2026-98495 CVE-2026-98498 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98505 CVE-2026-98506 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98510 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98523 CVE-2026-98524 CVE-2026-98525 CVE-2026-98526 CVE-2026-98527 CVE-2026-98528 CVE-2026-98529 CVE-2026-98531 CVE-2026-98532 CVE-2026-98533 CVE-2026-98534 CVE-2026-98535 CVE-2026-98536 CVE-2026-98537 CVE-2026-98538 CVE-2026-98539 CVE-2026-98541 CVE-2026-98544 CVE-2026-98545 CVE-2026-98546 CVE-2026-98547 CVE-2026-98548 CVE-2026-98549 CVE-2026-98550 CVE-2026-98553 CVE-2026-98554 CVE-2026-98555 CVE-2026-98559 CVE-2026-98561 CVE-2026-98565 CVE-2026-98566 CVE-2026-98567 CVE-2026-98568 CVE-2026-98569 CVE-2026-98572 CVE-2026-98573 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98586 CVE-2026-98588 CVE-2026-98590 CVE-2026-98591 CVE-2026-98593 CVE-2026-98594 CVE-2026-98596 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98610 CVE-2026-98611 CVE-2026-98612 CVE-2026-98613 CVE-2026-98614 CVE-2026-98615 CVE-2026-98618 CVE-2026-98620 CVE-2026-98621 CVE-2026-98622 CVE-2026-98623 CVE-2026-98624 CVE-2026-98625 CVE-2026-98626 CVE-2026-98629 CVE-2026-98631 CVE-2026-98632 CVE-2026-98634 CVE-2026-98636 CVE-2026-98640 CVE-2026-98641 CVE-2026-98642 CVE-2026-98643 CVE-2026-98644 CVE-2026-98646 CVE-2026-98647 CVE-2026-98655 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98672 CVE-2026-98673 CVE-2026-98677 CVE-2026-98679 CVE-2026-98680 CVE-2026-98681 CVE-2026-98686 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98707 CVE-2026-98708 CVE-2026-98709 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98716 CVE-2026-98717 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98725 CVE-2026-98726 CVE-2026-98727 CVE-2026-98728 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98734 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98738 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98750 CVE-2026-98751 CVE-2026-98752 CVE-2026-98753 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98762 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98767 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98775 CVE-2026-98777 CVE-2026-98778 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98790 CVE-2026-98791 CVE-2026-98792 CVE-2026-98793 CVE-2026-98794 CVE-2026-98796 CVE-2026-98797 CVE-2026-98798 CVE-2026-98801 CVE-2026-98805 CVE-2026-98807 CVE-2026-98808 CVE-2026-98809 CVE-2026-98811 CVE-2026-98812 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98826 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98831 CVE-2026-98833 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98841 CVE-2026-98844 CVE-2026-98845 CVE-2026-98846 CVE-2026-98847 CVE-2026-98848 CVE-2026-98849 CVE-2026-98850 CVE-2026-98851 CVE-2026-98852 CVE-2026-98854 CVE-2026-98855 CVE-2026-98856 CVE-2026-98857 CVE-2026-98858 CVE-2026-98859 CVE-2026-98860 CVE-2026-98862 CVE-2026-99999 Debian 錯誤 ： 1149499 1149564 1150891

    在 Linux 核心中發現數個弱點，這些弱點可能會導致特權提升、拒絕服務或資訊洩漏。

    對於 Debian 12 書蟲，這些問題已在 6.12.113-1~deb12u1 版本中修復。此更新還包括來自穩定更新 6.12.112 和 6.12.113的更多錯誤修復。

    我們建議您升級 linux-6.12 套件。

    有關 linux-6.12 的詳細安全性狀態，請參閱其安全性追蹤器頁面：
    https://security-tracker.debian.org/tracker/linux-6.12

    有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP 簽章

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

如 TuxCare CENTOS6：CLSA-2026：1792975902公告所述，CentOS Linux 6 主机上安装有受到多个漏洞影响的程序包。

  - 已修复 Linux 内核中的下列漏洞：hwrng: geode - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing pci_dev_put() for the normal and error path.
    (CVE-2022-50659)

  - 已修复 Linux 内核中的下列漏洞：ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN:
    ================================================================== BUG: KASAN: use-after-free in ubi_eba_copy_table+0x11f/0x1c0 [ubi] Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735 CPU: 2 PID: 4735 Comm: ubirsvol Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report+0x171/0x472 kasan_report+0xad/0x130 ubi_eba_copy_table+0x11f/0x1c0 [ubi] ubi_resize_volume+0x4f9/0xbc0 [ubi] ubi_cdev_ioctl+0x701/0x1850 [ubi] __x64_sys_ioctl+0x11d/0x170 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 </TASK> When ubi_change_vtbl_record() returns an error in ubi_resize_volume(), new_eba_tbl will be freed on error handing path, but it is holded by vol->eba_tbl in ubi_eba_replace_table(). It means that the liftcycle of vol->eba_tbl and vol are different, so when resizing volume in next time, it causing an use-after-free fault. Fix it by not freeing new_eba_tbl after it replaced in ubi_eba_replace_table(), while will be freed in next volume resizing. (CVE-2023-53800)

  - 已修复 Linux 内核中的下列漏洞：media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range.
    The final length we pass to av7110_ipack_instant_repack() is len - (buf[4] + 1) - 4 so add a check to ensure that the length is not negative. It's not clear that passing a negative len value does anything bad necessarily, but it's not best practice. With the new bounds checking the if (!len) condition is no longer possible or required so remove that. (CVE-2023-54284)

  - 已修复 Linux 内核中的下列漏洞：ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally reproduces a warning in ext4_put_super() associated with the dirty clusters count: WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324 ext4_put_super+0x48c/0x590 [ext4] Tracing the failure shows that the warning fires due to an s_dirtyclusters_counter value of -1. IOW, this appears to be a spurious decrement as opposed to some sort of leak. Further tracing of the dirty cluster count deltas and an LLM scan of the resulting output identified the cause as a double decrement in the error path between ext4_mb_mark_diskspace_used() and the caller ext4_mb_new_blocks(). First, note that generic/388 is a shutdown vs. fsstress test and so produces a random set of operations and shutdown injections. In the problematic case, the shutdown triggers an error return from the ext4_handle_dirty_metadata() call(s) made from ext4_mb_mark_context(). The changed value is non-zero at this point, so ext4_mb_mark_diskspace_used() does not exit after the error bubbles up from ext4_mb_mark_context(). Instead, the former decrements both cluster counters and returns the error up to ext4_mb_new_blocks(). The latter falls into the !ar->len out path which decrements the dirty clusters counter a second time, creating the inconsistency. To avoid this problem and simplify ownership of the cluster reservation in this codepath, lift the counter reduction to a single place in the caller. This makes it more clear that ext4_mb_new_blocks() is responsible for acquiring cluster reservation (via ext4_claim_free_clusters()) in the !delalloc case as well as releasing it, regardless of whether it ends up consumed or returned due to failure. (CVE-2026-45920)

  - 已修复 Linux 内核中的下列漏洞：wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index. (CVE-2026-46122)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Bluetooth：L2CAP：在控制和 FCS 访问之前验证帧长度 l2cap_data_rcv（） 解包双字节或四字节控制字段，但未事先确保该字段存在。因此，短 ERTM 或流模式帧可造成越界读取。启用时 CRC16 存在第二种短帧情况。拉取控制字段后，l2cap_check_fcs（） 从 skb->len 中减去 2，而不检查它。如果剩余字节少于两个字节，则进行减法换行;skb_trim（） 保持缓冲区不变，后续 FCS 加载读取超过帧的逻辑末尾。在访问任一字段之前，验证该框架是否同时包含其控制字段及其 FCS（如果启用）。（CVE-2026-98457）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 Debian 12 主机上存在安装的程序包，该程序包受到 DLA-4850 公告中提及的多个漏洞的影响。

    ------------------------------------------------------------------------- Debian LTS 公告 DLA-4850-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Ben Hutchings 2026 年 10 月 22 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    程序包：linux-6.12 版本：6.12.113-1~deb12u1 CVE ID： CVE-2025-38204 CVE-2025-40158 CVE-2026-52988 CVE-2026-72315 CVE-2026-72463 CVE-2026-74347 CVE-2026-80935 CVE-2026-80937 CVE-2026-80939 CVE-2026-80980 CVE-2026-81016 CVE-2026-89437 CVE-2026-89441 CVE-2026-89445 CVE-2026-89452 CVE-2026-89467 CVE-2026-89500 CVE-2026-89503 CVE-2026-89520 CVE-2026-89527 CVE-2026-89633 CVE-2026-89638 CVE-2026-89766 CVE-2026-89795 CVE-2026-89797 CVE-2026-89806 CVE-2026-89827 CVE-2026-89832 CVE-2026-89837 CVE-2026-89838 CVE-2026-89840 CVE-2026-89859 CVE-2026-89868 CVE-2026-89912 CVE-2026-89921 CVE-2026-89956 CVE-2026-89971 CVE-2026-89972 CVE-2026-89996 CVE-2026-90002 CVE-2026-90013 CVE-2026-90016 CVE-2026-90023 CVE-2026-90029 CVE-2026-90030 CVE-2026-90146 CVE-2026-93179 CVE-2026-93196 CVE-2026-93199 CVE-2026-93200 CVE-2026-93231 CVE-2026-93243 CVE-2026-93244 CVE-2026-93285 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97534 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97549 CVE-2026-97558 CVE-2026-97559 CVE-2026-97566 CVE-2026-97567 CVE-2026-97571 CVE-2026-97574 CVE-2026-97594 CVE-2026-97597 CVE-2026-97603 CVE-2026-97609 CVE-2026-97615 CVE-2026-97618 CVE-2026-97619 CVE-2026-97620 CVE-2026-97901 CVE-2026-97906 CVE-2026-97918 CVE-2026-97919 CVE-2026-97933 CVE-2026-97934 CVE-2026-97935 CVE-2026-97938 CVE-2026-97939 CVE-2026-97949 CVE-2026-97950 CVE-2026-98101 CVE-2026-98161 CVE-2026-98167 CVE-2026-98168 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98172 CVE-2026-98173 CVE-2026-98174 CVE-2026-98175 CVE-2026-98179 CVE-2026-98181 CVE-2026-98182 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98192 CVE-2026-98193 CVE-2026-98194 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98198 CVE-2026-98199 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98214 CVE-2026-98215 CVE-2026-98216 CVE-2026-98217 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98229 CVE-2026-98230 CVE-2026-98231 CVE-2026-98232 CVE-2026-98233 CVE-2026-98234 CVE-2026-98235 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98239 CVE-2026-98241 CVE-2026-98245 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98251 CVE-2026-98252 CVE-2026-98253 CVE-2026-98254 CVE-2026-98255 CVE-2026-98257 CVE-2026-98260 CVE-2026-98261 CVE-2026-98262 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98267 CVE-2026-98269 CVE-2026-98270 CVE-2026-98271 CVE-2026-98272 CVE-2026-98275 CVE-2026-98276 CVE-2026-98282 CVE-2026-98283 CVE-2026-98287 CVE-2026-98290 CVE-2026-98291 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98299 CVE-2026-98300 CVE-2026-98301 CVE-2026-98302 CVE-2026-98303 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98320 CVE-2026-98322 CVE-2026-98323 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98347 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98352 CVE-2026-98354 CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360 CVE-2026-98362 CVE-2026-98363 CVE-2026-98365 CVE-2026-98366 CVE-2026-98367 CVE-2026-98368 CVE-2026-98369 CVE-2026-98370 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98377 CVE-2026-98378 CVE-2026-98379 CVE-2026-98380 CVE-2026-98381 CVE-2026-98382 CVE-2026-98383 CVE-2026-98384 CVE-2026-98386 CVE-2026-98403 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98413 CVE-2026-98416 CVE-2026-98417 CVE-2026-98419 CVE-2026-98421 CVE-2026-98422 CVE-2026-98423 CVE-2026-98425 CVE-2026-98426 CVE-2026-98428 CVE-2026-98429 CVE-2026-98430 CVE-2026-98432 CVE-2026-98433 CVE-2026-98435 CVE-2026-98440 CVE-2026-98441 CVE-2026-98442 CVE-2026-98443 CVE-2026-98445 CVE-2026-98448 CVE-2026-98450 CVE-2026-98451 CVE-2026-98452 CVE-2026-98453 CVE-2026-98454 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98464 CVE-2026-98465 CVE-2026-98468 CVE-2026-98473 CVE-2026-98475 CVE-2026-98476 CVE-2026-98477 CVE-2026-98479 CVE-2026-98481 CVE-2026-98482 CVE-2026-98483 CVE-2026-98484 CVE-2026-98485 CVE-2026-98486 CVE-2026-98487 CVE-2026-98488 CVE-2026-98489 CVE-2026-98490 CVE-2026-98491 CVE-2026-98493 CVE-2026-98494 CVE-2026-98495 CVE-2026-98498 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98505 CVE-2026-98506 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98510 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98523 CVE-2026-98524 CVE-2026-98525 CVE-2026-98526 CVE-2026-98527 CVE-2026-98528 CVE-2026-98529 CVE-2026-98531 CVE-2026-98532 CVE-2026-98533 CVE-2026-98534 CVE-2026-98535 CVE-2026-98536 CVE-2026-98537 CVE-2026-98538 CVE-2026-98539 CVE-2026-98541 CVE-2026-98544 CVE-2026-98545 CVE-2026-98546 CVE-2026-98547 CVE-2026-98548 CVE-2026-98549 CVE-2026-98550 CVE-2026-98553 CVE-2026-98554 CVE-2026-98555 CVE-2026-98559 CVE-2026-98561 CVE-2026-98565 CVE-2026-98566 CVE-2026-98567 CVE-2026-98568 CVE-2026-98569 CVE-2026-98572 CVE-2026-98573 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98586 CVE-2026-98588 CVE-2026-98590 CVE-2026-98591 CVE-2026-98593 CVE-2026-98594 CVE-2026-98596 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98610 CVE-2026-98611 CVE-2026-98612 CVE-2026-98613 CVE-2026-98614 CVE-2026-98615 CVE-2026-98618 CVE-2026-98620 CVE-2026-98621 CVE-2026-98622 CVE-2026-98623 CVE-2026-98624 CVE-2026-98625 CVE-2026-98626 CVE-2026-98629 CVE-2026-98631 CVE-2026-98632 CVE-2026-98634 CVE-2026-98636 CVE-2026-98640 CVE-2026-98641 CVE-2026-98642 CVE-2026-98643 CVE-2026-98644 CVE-2026-98646 CVE-2026-98647 CVE-2026-98655 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98672 CVE-2026-98673 CVE-2026-98677 CVE-2026-98679 CVE-2026-98680 CVE-2026-98681 CVE-2026-98686 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98707 CVE-2026-98708 CVE-2026-98709 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98716 CVE-2026-98717 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98725 CVE-2026-98726 CVE-2026-98727 CVE-2026-98728 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98734 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98738 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98750 CVE-2026-98751 CVE-2026-98752 CVE-2026-98753 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98762 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98767 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98775 CVE-2026-98777 CVE-2026-98778 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98790 CVE-2026-98791 CVE-2026-98792 CVE-2026-98793 CVE-2026-98794 CVE-2026-98796 CVE-2026-98797 CVE-2026-98798 CVE-2026-98801 CVE-2026-98805 CVE-2026-98807 CVE-2026-98808 CVE-2026-98809 CVE-2026-98811 CVE-2026-98812 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98826 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98831 CVE-2026-98833 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98841 CVE-2026-98844 CVE-2026-98845 CVE-2026-98846 CVE-2026-98847 CVE-2026-98848 CVE-2026-98849 CVE-2026-98850 CVE-2026-98851 CVE-2026-98852 CVE-2026-98854 CVE-2026-98855 CVE-2026-98856 CVE-2026-98857 CVE-2026-98858 CVE-2026-98859 CVE-2026-98860 CVE-2026-98862 CVE-2026-99999 Debian 缺陷：1149499 1149564 1150891

    在 Linux 内核中发现多个可能导致权限升级、拒绝服务或信息泄漏的漏洞。

    对于 Debian 12 bookworm，这些问题已在 6.12.113-1~deb12u1 版本中修复。此更新还包括来自稳定更新 6.12.112 的大量缺陷补丁， 6.12.113以及 。

    我们建议您升级 linux-6.12 程序包。

    有关 linux-6.12 的详细安全状态，请参阅其安全跟踪页面：
    https://security-tracker.debian.org/tracker/linux-6.12

    有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP signature

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

CentOS Linux 6ホストには、TuxCare CENTOS6:CLSA-2026:1792975902アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: hwrng: geode - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing pci_dev_put() for the normal and error path.
    (CVE-2022-50659)

  - Linux カーネルでは、以下の脆弱性が解決されています: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN:
    ================================================================== BUG: KASAN: use-after-free in ubi_eba_copy_table+0x11f/0x1c0 [ubi] Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735 CPU: 2 PID: 4735 Comm: ubirsvol Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report+0x171/0x472 kasan_report+0xad/0x130 ubi_eba_copy_table+0x11f/0x1c0 [ubi] ubi_resize_volume+0x4f9/0xbc0 [ubi] ubi_cdev_ioctl+0x701/0x1850 [ubi] __x64_sys_ioctl+0x11d/0x170 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 </TASK> When ubi_change_vtbl_record() returns an error in ubi_resize_volume(), new_eba_tbl will be freed on error handing path, but it is holded by vol->eba_tbl in ubi_eba_replace_table(). It means that the liftcycle of vol->eba_tbl and vol are different, so when resizing volume in next time, it causing an use-after-free fault. Fix it by not freeing new_eba_tbl after it replaced in ubi_eba_replace_table(), while will be freed in next volume resizing. (CVE-2023-53800)

  - Linux カーネルでは、以下の脆弱性が解決されています: media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range.
    The final length we pass to av7110_ipack_instant_repack() is len - (buf[4] + 1) - 4 so add a check to ensure that the length is not negative. It's not clear that passing a negative len value does anything bad necessarily, but it's not best practice. With the new bounds checking the if (!len) condition is no longer possible or required so remove that. (CVE-2023-54284)

  - Linux カーネルでは、以下の脆弱性が解決されています: ext4: fix dirtyclusters double decrement on fs shutdown fstests test generic/388 occasionally reproduces a warning in ext4_put_super() associated with the dirty clusters count: WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324 ext4_put_super+0x48c/0x590 [ext4] Tracing the failure shows that the warning fires due to an s_dirtyclusters_counter value of -1. IOW, this appears to be a spurious decrement as opposed to some sort of leak. Further tracing of the dirty cluster count deltas and an LLM scan of the resulting output identified the cause as a double decrement in the error path between ext4_mb_mark_diskspace_used() and the caller ext4_mb_new_blocks(). First, note that generic/388 is a shutdown vs. fsstress test and so produces a random set of operations and shutdown injections. In the problematic case, the shutdown triggers an error return from the ext4_handle_dirty_metadata() call(s) made from ext4_mb_mark_context(). The changed value is non-zero at this point, so ext4_mb_mark_diskspace_used() does not exit after the error bubbles up from ext4_mb_mark_context(). Instead, the former decrements both cluster counters and returns the error up to ext4_mb_new_blocks(). The latter falls into the !ar->len out path which decrements the dirty clusters counter a second time, creating the inconsistency. To avoid this problem and simplify ownership of the cluster reservation in this codepath, lift the counter reduction to a single place in the caller. This makes it more clear that ext4_mb_new_blocks() is responsible for acquiring cluster reservation (via ext4_claim_free_clusters()) in the !delalloc case as well as releasing it, regardless of whether it ends up consumed or returned due to failure. (CVE-2026-45920)

  - Linux カーネルでは、以下の脆弱性が解決されています: wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index. (CVE-2026-46122)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Bluetooth:L2CAP:コントロールおよび FCS アクセスの前にフレーム長を検証します l2cap_data_rcv() は、最初に 2 バイトまたは 4 バイトのコントロールフィールドが存在することを確認せずに、そのフィールドの解凍を行います。したがって、短い ERTM またはストリーミングモードフレームは、領域外読み取りを引き起こす可能性があります。CRC16 が有効な場合、第 2 のショートフレームの場合があります。コントロールフィールドがプルされた後、l2cap_check_fcs() はチェックせずに skb->len から 2 を減算します。残り 2 バイト未満の場合、減算はラップされます。skb_trim() はバッファを変更せず、後続の FCS ロードはフレームの論理終端を越えて読み取ります。いずれかのフィールドにアクセスする前に、フレームに制御フィールドと FCS (有効な場合) の両方が含まれていることを検証してください。(CVE-2026-98457)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

リモートのDebian 12ホストには、dla-4850アドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    ------------------------------------------------------------------------- Debian LTSアドバイザリ DLA-4850-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Ben ハッチングス 2026年10月22日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    パッケージ:linux-6.12 バージョン:6.12.113-1~deb12u1 CVE ID: CVE-2025-38204 CVE-2025-40158 CVE-2026-52988 CVE-2026-72315 CVE-2026-72463 CVE-2026-74347 CVE-2026-80935 CVE-2026-80937 CVE-2026-80939 CVE-2026-80980 CVE-2026-81016 CVE-2026-89437 CVE-2026-89441 CVE-2026-89445 CVE-2026-89452 CVE-2026-89467 CVE-2026-89500 CVE-2026-89503 CVE-2026-89520 CVE-2026-89527 CVE-2026-89633 CVE-2026-89638 CVE-2026-89766 CVE-2026-89795 CVE-2026-89797 CVE-2026-89806 CVE-2026-89827 CVE-2026-89832 CVE-2026-89837 CVE-2026-89838 CVE-2026-89840 CVE-2026-89859 CVE-2026-89868 CVE-2026-89912 CVE-2026-89921 CVE-2026-89956 CVE-2026-89971 CVE-2026-89972 CVE-2026-89996 CVE-2026-90002 CVE-2026-90013 CVE-2026-90016 CVE-2026-90023 CVE-2026-90029 CVE-2026-90030 CVE-2026-90146 CVE-2026-93179 CVE-2026-93196 CVE-2026-93199 CVE-2026-93200 CVE-2026-93231 CVE-2026-93243 CVE-2026-93244 CVE-2026-93285 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97534 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97549 CVE-2026-97558 CVE-2026-97559 CVE-2026-97566 CVE-2026-97567 CVE-2026-97571 CVE-2026-97574 CVE-2026-97594 CVE-2026-97597 CVE-2026-97603 CVE-2026-97609 CVE-2026-97615 CVE-2026-97618 CVE-2026-97619 CVE-2026-97620 CVE-2026-97901 CVE-2026-97906 CVE-2026-97918 CVE-2026-97919 CVE-2026-97933 CVE-2026-97934 CVE-2026-97935 CVE-2026-97938 CVE-2026-97939 CVE-2026-97949 CVE-2026-97950 CVE-2026-98101 CVE-2026-98161 CVE-2026-98167 CVE-2026-98168 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98172 CVE-2026-98173 CVE-2026-98174 CVE-2026-98175 CVE-2026-98179 CVE-2026-98181 CVE-2026-98182 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98192 CVE-2026-98193 CVE-2026-98194 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98198 CVE-2026-98199 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98214 CVE-2026-98215 CVE-2026-98216 CVE-2026-98217 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98229 CVE-2026-98230 CVE-2026-98231 CVE-2026-98232 CVE-2026-98233 CVE-2026-98234 CVE-2026-98235 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98239 CVE-2026-98241 CVE-2026-98245 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98251 CVE-2026-98252 CVE-2026-98253 CVE-2026-98254 CVE-2026-98255 CVE-2026-98257 CVE-2026-98260 CVE-2026-98261 CVE-2026-98262 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98267 CVE-2026-98269 CVE-2026-98270 CVE-2026-98271 CVE-2026-98272 CVE-2026-98275 CVE-2026-98276 CVE-2026-98282 CVE-2026-98283 CVE-2026-98287 CVE-2026-98290 CVE-2026-98291 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98299 CVE-2026-98300 CVE-2026-98301 CVE-2026-98302 CVE-2026-98303 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98320 CVE-2026-98322 CVE-2026-98323 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98347 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98352 CVE-2026-98354 CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360 CVE-2026-98362 CVE-2026-98363 CVE-2026-98365 CVE-2026-98366 CVE-2026-98367 CVE-2026-98368 CVE-2026-98369 CVE-2026-98370 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98377 CVE-2026-98378 CVE-2026-98379 CVE-2026-98380 CVE-2026-98381 CVE-2026-98382 CVE-2026-98383 CVE-2026-98384 CVE-2026-98386 CVE-2026-98403 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98413 CVE-2026-98416 CVE-2026-98417 CVE-2026-98419 CVE-2026-98421 CVE-2026-98422 CVE-2026-98423 CVE-2026-98425 CVE-2026-98426 CVE-2026-98428 CVE-2026-98429 CVE-2026-98430 CVE-2026-98432 CVE-2026-98433 CVE-2026-98435 CVE-2026-98440 CVE-2026-98441 CVE-2026-98442 CVE-2026-98443 CVE-2026-98445 CVE-2026-98448 CVE-2026-98450 CVE-2026-98451 CVE-2026-98452 CVE-2026-98453 CVE-2026-98454 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98464 CVE-2026-98465 CVE-2026-98468 CVE-2026-98473 CVE-2026-98475 CVE-2026-98476 CVE-2026-98477 CVE-2026-98479 CVE-2026-98481 CVE-2026-98482 CVE-2026-98483 CVE-2026-98484 CVE-2026-98485 CVE-2026-98486 CVE-2026-98487 CVE-2026-98488 CVE-2026-98489 CVE-2026-98490 CVE-2026-98491 CVE-2026-98493 CVE-2026-98494 CVE-2026-98495 CVE-2026-98498 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98505 CVE-2026-98506 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98510 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98523 CVE-2026-98524 CVE-2026-98525 CVE-2026-98526 CVE-2026-98527 CVE-2026-98528 CVE-2026-98529 CVE-2026-98531 CVE-2026-98532 CVE-2026-98533 CVE-2026-98534 CVE-2026-98535 CVE-2026-98536 CVE-2026-98537 CVE-2026-98538 CVE-2026-98539 CVE-2026-98541 CVE-2026-98544 CVE-2026-98545 CVE-2026-98546 CVE-2026-98547 CVE-2026-98548 CVE-2026-98549 CVE-2026-98550 CVE-2026-98553 CVE-2026-98554 CVE-2026-98555 CVE-2026-98559 CVE-2026-98561 CVE-2026-98565 CVE-2026-98566 CVE-2026-98567 CVE-2026-98568 CVE-2026-98569 CVE-2026-98572 CVE-2026-98573 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98586 CVE-2026-98588 CVE-2026-98590 CVE-2026-98591 CVE-2026-98593 CVE-2026-98594 CVE-2026-98596 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98610 CVE-2026-98611 CVE-2026-98612 CVE-2026-98613 CVE-2026-98614 CVE-2026-98615 CVE-2026-98618 CVE-2026-98620 CVE-2026-98621 CVE-2026-98622 CVE-2026-98623 CVE-2026-98624 CVE-2026-98625 CVE-2026-98626 CVE-2026-98629 CVE-2026-98631 CVE-2026-98632 CVE-2026-98634 CVE-2026-98636 CVE-2026-98640 CVE-2026-98641 CVE-2026-98642 CVE-2026-98643 CVE-2026-98644 CVE-2026-98646 CVE-2026-98647 CVE-2026-98655 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98672 CVE-2026-98673 CVE-2026-98677 CVE-2026-98679 CVE-2026-98680 CVE-2026-98681 CVE-2026-98686 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98707 CVE-2026-98708 CVE-2026-98709 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98716 CVE-2026-98717 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98725 CVE-2026-98726 CVE-2026-98727 CVE-2026-98728 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98734 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98738 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98750 CVE-2026-98751 CVE-2026-98752 CVE-2026-98753 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98762 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98767 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98775 CVE-2026-98777 CVE-2026-98778 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98790 CVE-2026-98791 CVE-2026-98792 CVE-2026-98793 CVE-2026-98794 CVE-2026-98796 CVE-2026-98797 CVE-2026-98798 CVE-2026-98801 CVE-2026-98805 CVE-2026-98807 CVE-2026-98808 CVE-2026-98809 CVE-2026-98811 CVE-2026-98812 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98826 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98831 CVE-2026-98833 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98841 CVE-2026-98844 CVE-2026-98845 CVE-2026-98846 CVE-2026-98847 CVE-2026-98848 CVE-2026-98849 CVE-2026-98850 CVE-2026-98851 CVE-2026-98852 CVE-2026-98854 CVE-2026-98855 CVE-2026-98856 CVE-2026-98857 CVE-2026-98858 CVE-2026-98859 CVE-2026-98860 CVE-2026-98862 CVE-2026-99999 Debian バグ:1149499 1149564 1150891

    Linux カーネルに、権限昇格、サービス拒否、または情報漏洩を引き起こす可能性がある、複数の脆弱性が発見されました。

    Debian 12 bookworm では、これらの問題はバージョン 6.12.113-1~deb12u1 で修正されました。この更新には、 6.12.112 および 6.12.113の安定版(stable)更新プログラムからのさらに多くのバグ修正が含まれています。

    お使いの linux-6.12 パッケージをアップグレードすることを推奨します。

    linux-6.12 の詳細なセキュリティステータスについては、次のセキュリティ追跡ページを参照してください:
    https://security-tracker.debian.org/tracker/linux-6.12

    Debian LTS セキュリティアドバイザリに関する詳細、これらの更新をシステムに適用する方法、およびよくある質問については、こちらを参照してください。https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP 署名

Tenable は、前述の説明ブロックを Debian セキュリティアドバイザリから直接抽出しました。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792975902 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: hwrng: geode - Fix PCI device refcount     leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it     will increase the reference count for the returned pci_dev and also decrease the reference count for the     input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to     call pci_dev_put() to decrease the reference count. We add a new struct 'amd_geode_priv' to record pointer     of the pci_dev and membase, and then add missing pci_dev_put() for the normal and error path.
    (CVE-2022-50659)

  - In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume     resizing failed There is an use-after-free problem reported by KASAN:
    ================================================================== BUG: KASAN: use-after-free in     ubi_eba_copy_table+0x11f/0x1c0 [ubi] Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735 CPU: 2     PID: 4735 Comm: ubirsvol Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14 Hardware name: QEMU Standard     PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x34/0x44     print_report+0x171/0x472 kasan_report+0xad/0x130 ubi_eba_copy_table+0x11f/0x1c0 [ubi]     ubi_resize_volume+0x4f9/0xbc0 [ubi] ubi_cdev_ioctl+0x701/0x1850 [ubi] __x64_sys_ioctl+0x11d/0x170     do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 </TASK> When ubi_change_vtbl_record()     returns an error in ubi_resize_volume(), new_eba_tbl will be freed on error handing path, but it is     holded by vol->eba_tbl in ubi_eba_replace_table(). It means that the liftcycle of vol->eba_tbl and     vol are different, so when resizing volume in next time, it causing an use-after-free fault. Fix it by     not freeing new_eba_tbl after it replaced in ubi_eba_replace_table(), while will be freed in next volume     resizing. (CVE-2023-53800)

  - In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in     write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range.
    The final length we pass to av7110_ipack_instant_repack() is len - (buf[4] + 1) - 4 so add a check to     ensure that the length is not negative. It's not clear that passing a negative len value does anything bad     necessarily, but it's not best practice. With the new bounds checking the if (!len) condition is no     longer possible or required so remove that. (CVE-2023-54284)

  - In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double     decrement on fs shutdown fstests test generic/388 occasionally reproduces a warning in ext4_put_super()     associated with the dirty clusters count: WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324     ext4_put_super+0x48c/0x590 [ext4] Tracing the failure shows that the warning fires due to an     s_dirtyclusters_counter value of -1. IOW, this appears to be a spurious decrement as opposed to some sort     of leak. Further tracing of the dirty cluster count deltas and an LLM scan of the resulting output     identified the cause as a double decrement in the error path between ext4_mb_mark_diskspace_used() and the     caller ext4_mb_new_blocks(). First, note that generic/388 is a shutdown vs. fsstress test and so produces     a random set of operations and shutdown injections. In the problematic case, the shutdown triggers an     error return from the ext4_handle_dirty_metadata() call(s) made from ext4_mb_mark_context(). The changed     value is non-zero at this point, so ext4_mb_mark_diskspace_used() does not exit after the error bubbles up     from ext4_mb_mark_context(). Instead, the former decrements both cluster counters and returns the error up     to ext4_mb_new_blocks(). The latter falls into the !ar->len out path which decrements the dirty clusters     counter a second time, creating the inconsistency. To avoid this problem and simplify ownership of the     cluster reservation in this codepath, lift the counter reduction to a single place in the caller. This     makes it more clear that ext4_mb_new_blocks() is responsible for acquiring cluster reservation (via     ext4_claim_free_clusters()) in the !delalloc case as well as releasing it, regardless of whether it ends     up consumed or returned due to failure. (CVE-2026-45920)

  - In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on     firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[]     array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-     of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an     invalid key index. (CVE-2026-46122)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: L2CAP: validate frame length before control and FCS access l2cap_data_rcv() unpacks either a     two-byte or four-byte control field without first ensuring that it is present. A short ERTM or streaming-     mode frame can therefore cause an out-of-bounds read. There is a second short-frame case when CRC16 is     enabled. After the control field is pulled, l2cap_check_fcs() subtracts two from skb->len without checking     it. If fewer than two bytes remain, the subtraction wraps; skb_trim() leaves the buffer unchanged and the     subsequent FCS load reads past the logical end of the frame. Validate that the frame contains both its     control field and, when enabled, its FCS before either field is accessed. (CVE-2026-98457)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4850 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4850-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 22, 2026                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.12     Version        : 6.12.113-1~deb12u1     CVE ID         : CVE-2025-38204 CVE-2025-40158 CVE-2026-52988 CVE-2026-72315                      CVE-2026-72463 CVE-2026-74347 CVE-2026-80935 CVE-2026-80937                      CVE-2026-80939 CVE-2026-80980 CVE-2026-81016 CVE-2026-89437                      CVE-2026-89441 CVE-2026-89445 CVE-2026-89452 CVE-2026-89467                      CVE-2026-89500 CVE-2026-89503 CVE-2026-89520 CVE-2026-89527                      CVE-2026-89633 CVE-2026-89638 CVE-2026-89766 CVE-2026-89795                      CVE-2026-89797 CVE-2026-89806 CVE-2026-89827 CVE-2026-89832                      CVE-2026-89837 CVE-2026-89838 CVE-2026-89840 CVE-2026-89859                      CVE-2026-89868 CVE-2026-89912 CVE-2026-89921 CVE-2026-89956                      CVE-2026-89971 CVE-2026-89972 CVE-2026-89996 CVE-2026-90002                      CVE-2026-90013 CVE-2026-90016 CVE-2026-90023 CVE-2026-90029                      CVE-2026-90030 CVE-2026-90146 CVE-2026-93179 CVE-2026-93196                      CVE-2026-93199 CVE-2026-93200 CVE-2026-93231 CVE-2026-93243                      CVE-2026-93244 CVE-2026-93285 CVE-2026-97527 CVE-2026-97528                      CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532                      CVE-2026-97534 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537                      CVE-2026-97549 CVE-2026-97558 CVE-2026-97559 CVE-2026-97566                      CVE-2026-97567 CVE-2026-97571 CVE-2026-97574 CVE-2026-97594                      CVE-2026-97597 CVE-2026-97603 CVE-2026-97609 CVE-2026-97615                      CVE-2026-97618 CVE-2026-97619 CVE-2026-97620 CVE-2026-97901                      CVE-2026-97906 CVE-2026-97918 CVE-2026-97919 CVE-2026-97933                      CVE-2026-97934 CVE-2026-97935 CVE-2026-97938 CVE-2026-97939                      CVE-2026-97949 CVE-2026-97950 CVE-2026-98101 CVE-2026-98161                      CVE-2026-98167 CVE-2026-98168 CVE-2026-98169 CVE-2026-98170                      CVE-2026-98171 CVE-2026-98172 CVE-2026-98173 CVE-2026-98174                      CVE-2026-98175 CVE-2026-98179 CVE-2026-98181 CVE-2026-98182                      CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187                      CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191                      CVE-2026-98192 CVE-2026-98193 CVE-2026-98194 CVE-2026-98195                      CVE-2026-98196 CVE-2026-98197 CVE-2026-98198 CVE-2026-98199                      CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203                      CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207                      CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211                      CVE-2026-98212 CVE-2026-98213 CVE-2026-98214 CVE-2026-98215                      CVE-2026-98216 CVE-2026-98217 CVE-2026-98218 CVE-2026-98221                      CVE-2026-98222 CVE-2026-98227 CVE-2026-98229 CVE-2026-98230                      CVE-2026-98231 CVE-2026-98232 CVE-2026-98233 CVE-2026-98234                      CVE-2026-98235 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238                      CVE-2026-98239 CVE-2026-98241 CVE-2026-98245 CVE-2026-98246                      CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98251                      CVE-2026-98252 CVE-2026-98253 CVE-2026-98254 CVE-2026-98255                      CVE-2026-98257 CVE-2026-98260 CVE-2026-98261 CVE-2026-98262                      CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266                      CVE-2026-98267 CVE-2026-98269 CVE-2026-98270 CVE-2026-98271                      CVE-2026-98272 CVE-2026-98275 CVE-2026-98276 CVE-2026-98282                      CVE-2026-98283 CVE-2026-98287 CVE-2026-98290 CVE-2026-98291                      CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298                      CVE-2026-98299 CVE-2026-98300 CVE-2026-98301 CVE-2026-98302                      CVE-2026-98303 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308                      CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314                      CVE-2026-98316 CVE-2026-98319 CVE-2026-98320 CVE-2026-98322                      CVE-2026-98323 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327                      CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98334                      CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339                      CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344                      CVE-2026-98345 CVE-2026-98346 CVE-2026-98347 CVE-2026-98348                      CVE-2026-98349 CVE-2026-98351 CVE-2026-98352 CVE-2026-98354                      CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360                      CVE-2026-98362 CVE-2026-98363 CVE-2026-98365 CVE-2026-98366                      CVE-2026-98367 CVE-2026-98368 CVE-2026-98369 CVE-2026-98370                      CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98377                      CVE-2026-98378 CVE-2026-98379 CVE-2026-98380 CVE-2026-98381                      CVE-2026-98382 CVE-2026-98383 CVE-2026-98384 CVE-2026-98386                      CVE-2026-98403 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409                      CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98413                      CVE-2026-98416 CVE-2026-98417 CVE-2026-98419 CVE-2026-98421                      CVE-2026-98422 CVE-2026-98423 CVE-2026-98425 CVE-2026-98426                      CVE-2026-98428 CVE-2026-98429 CVE-2026-98430 CVE-2026-98432                      CVE-2026-98433 CVE-2026-98435 CVE-2026-98440 CVE-2026-98441                      CVE-2026-98442 CVE-2026-98443 CVE-2026-98445 CVE-2026-98448                      CVE-2026-98450 CVE-2026-98451 CVE-2026-98452 CVE-2026-98453                      CVE-2026-98454 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457                      CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461                      CVE-2026-98462 CVE-2026-98464 CVE-2026-98465 CVE-2026-98468                      CVE-2026-98473 CVE-2026-98475 CVE-2026-98476 CVE-2026-98477                      CVE-2026-98479 CVE-2026-98481 CVE-2026-98482 CVE-2026-98483                      CVE-2026-98484 CVE-2026-98485 CVE-2026-98486 CVE-2026-98487                      CVE-2026-98488 CVE-2026-98489 CVE-2026-98490 CVE-2026-98491                      CVE-2026-98493 CVE-2026-98494 CVE-2026-98495 CVE-2026-98498                      CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503                      CVE-2026-98504 CVE-2026-98505 CVE-2026-98506 CVE-2026-98507                      CVE-2026-98508 CVE-2026-98509 CVE-2026-98510 CVE-2026-98511                      CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515                      CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521                      CVE-2026-98522 CVE-2026-98523 CVE-2026-98524 CVE-2026-98525                      CVE-2026-98526 CVE-2026-98527 CVE-2026-98528 CVE-2026-98529                      CVE-2026-98531 CVE-2026-98532 CVE-2026-98533 CVE-2026-98534                      CVE-2026-98535 CVE-2026-98536 CVE-2026-98537 CVE-2026-98538                      CVE-2026-98539 CVE-2026-98541 CVE-2026-98544 CVE-2026-98545                      CVE-2026-98546 CVE-2026-98547 CVE-2026-98548 CVE-2026-98549                      CVE-2026-98550 CVE-2026-98553 CVE-2026-98554 CVE-2026-98555                      CVE-2026-98559 CVE-2026-98561 CVE-2026-98565 CVE-2026-98566                      CVE-2026-98567 CVE-2026-98568 CVE-2026-98569 CVE-2026-98572                      CVE-2026-98573 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577                      CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581                      CVE-2026-98582 CVE-2026-98583 CVE-2026-98586 CVE-2026-98588                      CVE-2026-98590 CVE-2026-98591 CVE-2026-98593 CVE-2026-98594                      CVE-2026-98596 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601                      CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607                      CVE-2026-98608 CVE-2026-98609 CVE-2026-98610 CVE-2026-98611                      CVE-2026-98612 CVE-2026-98613 CVE-2026-98614 CVE-2026-98615                      CVE-2026-98618 CVE-2026-98620 CVE-2026-98621 CVE-2026-98622                      CVE-2026-98623 CVE-2026-98624 CVE-2026-98625 CVE-2026-98626                      CVE-2026-98629 CVE-2026-98631 CVE-2026-98632 CVE-2026-98634                      CVE-2026-98636 CVE-2026-98640 CVE-2026-98641 CVE-2026-98642                      CVE-2026-98643 CVE-2026-98644 CVE-2026-98646 CVE-2026-98647                      CVE-2026-98655 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658                      CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663                      CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668                      CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98672                      CVE-2026-98673 CVE-2026-98677 CVE-2026-98679 CVE-2026-98680                      CVE-2026-98681 CVE-2026-98686 CVE-2026-98687 CVE-2026-98694                      CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698                      CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702                      CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706                      CVE-2026-98707 CVE-2026-98708 CVE-2026-98709 CVE-2026-98710                      CVE-2026-98711 CVE-2026-98713 CVE-2026-98716 CVE-2026-98717                      CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98725                      CVE-2026-98726 CVE-2026-98727 CVE-2026-98728 CVE-2026-98730                      CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98734                      CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98738                      CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743                      CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748                      CVE-2026-98749 CVE-2026-98750 CVE-2026-98751 CVE-2026-98752                      CVE-2026-98753 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756                      CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761                      CVE-2026-98762 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765                      CVE-2026-98766 CVE-2026-98767 CVE-2026-98768 CVE-2026-98769                      CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773                      CVE-2026-98775 CVE-2026-98777 CVE-2026-98778 CVE-2026-98779                      CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783                      CVE-2026-98784 CVE-2026-98785 CVE-2026-98790 CVE-2026-98791                      CVE-2026-98792 CVE-2026-98793 CVE-2026-98794 CVE-2026-98796                      CVE-2026-98797 CVE-2026-98798 CVE-2026-98801 CVE-2026-98805                      CVE-2026-98807 CVE-2026-98808 CVE-2026-98809 CVE-2026-98811                      CVE-2026-98812 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823                      CVE-2026-98825 CVE-2026-98826 CVE-2026-98827 CVE-2026-98828                      CVE-2026-98830 CVE-2026-98831 CVE-2026-98833 CVE-2026-98835                      CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840                      CVE-2026-98841 CVE-2026-98844 CVE-2026-98845 CVE-2026-98846                      CVE-2026-98847 CVE-2026-98848 CVE-2026-98849 CVE-2026-98850                      CVE-2026-98851 CVE-2026-98852 CVE-2026-98854 CVE-2026-98855                      CVE-2026-98856 CVE-2026-98857 CVE-2026-98858 CVE-2026-98859                      CVE-2026-98860 CVE-2026-98862 CVE-2026-99999     Debian Bug     : 1149499 1149564 1150891

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.12.113-1~deb12u1.  This update additionally includes many more bug     fixes from stable updates 6.12.112 and 6.12.113.

    We recommend that you upgrade your linux-6.12 packages.

    For the detailed security status of linux-6.12 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.12

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
373891	CentOS Linux 6 [TuxCare] 安全性更新：kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc 多個弱點（CENTOS6：CLSA-2026：1792975902）	Nessus	CentOS Local Security Checks	2026/10/29	2026/10/29	high
367334	Linux Distros 未修補弱點：CVE-2026-98457	Nessus	Misc.	2026/10/19	2026/10/30	high
370518	Debian dla-4850 ： ata-modules-6.12.107+deb12-armmp-di - 安全性更新	Nessus	Debian Local Security Checks	2026/10/22	2026/10/23	high
373891	CentOS Linux 6 [TuxCare] 安全更新：kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / 等多个漏洞（CENTOS6：CLSA-2026：1792975902）	Nessus	CentOS Local Security Checks	2026/10/29	2026/10/29	high
367334	Linux Distros 未修补的漏洞：CVE-2026-98457	Nessus	Misc.	2026/10/19	2026/10/30	high
370518	Debian dla-4850：ata-modules-6.12.107+deb12-armmp-di - 安全更新	Nessus	Debian Local Security Checks	2026/10/22	2026/10/23	high
373891	CentOS Linux 6 [TuxCare] セキュリティ更新プログラム:カーネル/kernel-abi-whitelists/kernel-debug/kernel-debug-devel/etcの複数の脆弱性(CENTOS6:CLSA-2026:1792975902)	Nessus	CentOS Local Security Checks	2026/10/29	2026/10/29	high
367334	Linux Distros のパッチ未適用の脆弱性: CVE-2026-98457	Nessus	Misc.	2026/10/19	2026/10/30	high
370518	Debian DLA-4850:ata-modules-6.12.107+deb12-armmp-di - セキュリティ更新	Nessus	Debian Local Security Checks	2026/10/22	2026/10/23	high
373891	CentOS Linux 6 [TuxCare] Security Update: kernel / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792975902)	Nessus	CentOS Local Security Checks	2026/10/29	2026/10/29	high
374972	Photon OS 5.0: Linux PHSA-2026-5.0-92-1026	Nessus	PhotonOS Local Security Checks	2026/11/2	2026/11/2	medium
367334	Linux Distros Unpatched Vulnerability : CVE-2026-98457	Nessus	Misc.	2026/10/19	2026/10/30	high
370518	Debian dla-4850 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	2026/10/22	2026/10/23	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

medium

high

high