The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in     binder_get_object() Commit 6d98eb95b450 (binder: avoid potential data leakage when copying txn)     introduced changes to how binder objects are copied. In doing so, it unintentionally removed an offset     alignment check done through calls to binder_alloc_copy_from_buffer() -> check_buffer(). These calls were     replaced in binder_get_object() with copy_from_user(), so now an explicit offset alignment check is needed     here. This avoids later complications when unwinding the objects gets harder. It is worth noting this     check existed prior to commit 7a67a39320df (binder: add function to copy binder object from buffer),     likely removed due to redundancy at the time. (CVE-2024-26926)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-26926

high Nessus Plugin ID 227553

Version 1.10

Version 1.9

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.9 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510280902
Version 1.5 Sep 7, 2025, 7:21 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509070721
Version 1.4 Sep 5, 2025, 4:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509051638
Version 1.2 Aug 15, 2025, 7:38 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2024-26926, severity increased from "Medium" to "High") CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508151938
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723