The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA     region When the bootloader/firmware doesn't setup the framebuffers, their address and size are 0 in     iommu-addresses property. If IOVA region is reserved with 0 length, then it ends up corrupting the IOVA     rbtree with an entry which has pfn_hi < pfn_lo. If we intend to use display driver in kernel without     framebuffer then it's causing the display IOMMU mappings to fail as entire valid IOVA space is reserved     when address and length are passed as 0. An ideal solution would be firmware removing the iommu-     addresses property and corresponding memory-region if display is not present. But the kernel should be     able to handle this by checking for size of IOVA region and skipping the IOVA reservation if size is 0.
    Also, add a warning if firmware is requesting 0-length IOVA region reservation. (CVE-2023-52455)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-52455

high Nessus Plugin ID 245550

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Jul 18, 2026, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.3 Sep 14, 2025, 2:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509141450
Version 1.1 Aug 8, 2025, 1:31 AM New Plugin Feed: 202508080131