The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvb_dvr_open() calls     dvb_ringbuffer_init() when a new reader opens the DVR device. dvb_ringbuffer_init() calls     init_waitqueue_head(), which reinitializes the waitqueue list head to empty. Since     dmxdev->dvr_buffer.queue is a shared waitqueue (all opens of the same DVR device share it), this orphans     any existing waitqueue entries from io_uring poll or epoll, leaving them with stale prev/next pointers     while the list head is reset to {self, self}. The waitqueue and spinlock in dvr_buffer are already     properly initialized once in dvb_dmxdev_init(). The open path only needs to reset the buffer data pointer,     size, and read/write positions. Replace the dvb_ringbuffer_init() call in dvb_dvr_open() with direct     assignment of data/size and a call to dvb_ringbuffer_reset(), which properly resets pread, pwrite, and     error with correct memory ordering without touching the waitqueue or spinlock. (CVE-2026-23253)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23253

high Nessus Plugin ID 302955

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Mar 21, 2026, 9:15 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603210915
Version 1.2 Mar 19, 2026, 6:55 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202603191855
Version 1.1 Mar 19, 2026, 12:10 PM New Plugin Feed: 202603191210