The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: use     cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process When tearing down a 'hisi_hns3'     PMU, we mistakenly run the CPU hotplug callbacks after the device has been unregistered, leading to     fireworks when we try to execute empty function callbacks within the driver: | Unable to handle kernel     NULL pointer dereference at virtual address 0000000000000000 | CPU: 0 PID: 15 Comm: cpuhp/0 Tainted: G W O     5.12.0-rc4+ #1 | Hardware name: , BIOS KpxxxFPGA 1P B600 V143 04/22/2021 | pstate: 80400009 (Nzcv daif     +PAN -UAO -TCO BTYPE=--) | pc : perf_pmu_migrate_context+0x98/0x38c | lr :
    perf_pmu_migrate_context+0x94/0x38c | | Call trace: | perf_pmu_migrate_context+0x98/0x38c |     hisi_hns3_pmu_offline_cpu+0x104/0x12c [hisi_hns3_pmu] Use cpuhp_state_remove_instance_nocalls() instead of     cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been     unregistered. [will: Rewrote commit message] (CVE-2023-52860)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-52860

medium Nessus Plugin ID 245252

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 23, 2026, 1:21 PM Plugin metadata Plugin Feed: 202609231321
Version 1.2 Jul 18, 2026, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.1 Aug 8, 2025, 1:31 AM New Plugin Feed: 202508080131