The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero The driver allocates arrays for     ports, FDBs, and filter blocks using kcalloc() with ethsw->sw_attr.num_ifs as the element count. When the     device reports zero interfaces (either due to hardware configuration or firmware issues), kcalloc(0, ...)     returns ZERO_SIZE_PTR (0x10) instead of NULL. Later in dpaa2_switch_probe(), the NAPI initialization     unconditionally accesses ethsw->ports[0]->netdev, which attempts to dereference ZERO_SIZE_PTR (address     0x10), resulting in a kernel panic. Add a check to ensure num_ifs is greater than zero after retrieving     device attributes. This prevents the zero-sized allocations and subsequent invalid pointer dereference.
    (CVE-2026-23206)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23206

medium Nessus Plugin ID 299088

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.10 Mar 23, 2026, 11:56 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202603231156
Version 1.9 Mar 20, 2026, 2:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603200256
Version 1.8 Mar 13, 2026, 2:54 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603131454
Version 1.7 Mar 10, 2026, 1:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603100156
Version 1.6 Feb 24, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602240612
Version 1.5 Feb 23, 2026, 1:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602231338
Version 1.4 Feb 19, 2026, 5:16 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602190516
Version 1.3 Feb 18, 2026, 9:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602180924
Version 1.2 Feb 17, 2026, 12:54 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-23206, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602170054
Version 1.1 Feb 15, 2026, 7:08 AM New Plugin Feed: 202602150708