In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly match the buffer element type.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t)     (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly     match the buffer element type. (CVE-2026-43476)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	medium
321210	Photon OS 5.0: Linux PHSA-2026-5.0-0837	Nessus	PhotonOS Local Security Checks	high
314734	Linux Distros Unpatched Vulnerability : CVE-2026-43476	Nessus	Misc.	high
313507	Photon OS 5.0: Linux PHSA-2026-5.0-0842	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2026-43476

high

Tenable Plugins

medium

high

high

high