216 matches found
ROOT-OS-DEBIAN-11-CVE-2026-43284 CVE-2026-43284 in linux - Patched by Root
Root has patched CVE-2026-43284 in the linux package for Root:Debian:11. Multiple fixed versions available...
Photon OS 5.0: Linux PHSA-2026-5.0-91-0846
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0846. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
B&R Automation X20EDS410 Write-what-where Condition (CVE-2026-43284)
The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's xfrm ESP input path that decrypts in place over shared skb frags. Successful local exploitation of this vulnerability could allow an authenticated attacker with low...
Siemens SIMATIC S7-1500 CPU 1518 MFP Write-what-where Condition (CVE-2026-43284)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505598; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract !tuxasse...
RHEL 9 : kernel-rt (RHSA-2026:16254)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16254 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...
RHEL 9 : kernel (RHSA-2026:16206)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16206 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Dirty Frag is a new universal Local...
Oracle Linux 10 : kernel (ELSA-2026-19074)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19074 advisory. - xfrm: esp: avoid in-place decrypt on shared skb frags CKI Backport Bot RHEL-174546 CVE-2026-43284 - crypto: authencesn - Do not place hiseq at end ...
Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-8530-1)
"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8530-1 advisory. It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag....
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50373)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50373 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39668793 CVE-2026-46331 - net: skbuff: fix missing zerocop...
xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSGSPLICEPAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFLSHAREDFRAG after skbsplicefromiter, so later paths that may modify packet data ca...
EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2518)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly...
EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2517)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2516)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...
EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-2431)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 crypto: algifaead - Revert to operating...
EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2432)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 crypto: algifaead - Revert to operating...
Photon OS 4.0: Linux PHSA-2026-4.0-1014
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-2423)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-2424)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly from the EulerO...
USN-8426-1 linux-azure-5.15, linux-azure-fips vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...