The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in     nl80211_parse_mbssid_elems() nl80211_parse_mbssid_elems() uses a u8 variable num_elems to count the number     of MBSSID elements in the nested netlink attribute attrs, which can lead to an integer overflow if a user     of the nl80211 interface specifies 256 or more elements in the corresponding attribute in userspace. The     integer overflow can lead to a heap buffer overflow as num_elems determines the size of the trailing array     in elems, and this array is thereafter written to for each element in attrs. Note that this vulnerability     only affects devices with the wiphy->mbssid_max_interfaces member set for the wireless physical device     struct in the device driver, and can only be triggered by a process with CAP_NET_ADMIN capabilities. Fix     this by checking for a maximum of 255 elements in attrs. (CVE-2023-53570)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-53570

high Nessus Plugin ID 269399

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Nov 5, 2025, 1:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511050128
Version 1.3 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510272356
Version 1.1 Oct 8, 2025, 9:19 AM New Plugin Feed: 202510080919