The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - hwmon: (pmbus/core) Protect regulator operations with mutex The regulator operations     pmbus_regulator_get_voltage(), pmbus_regulator_set_voltage(), and pmbus_regulator_list_voltage() access     PMBus registers and shared data but were not protected by the update_lock mutex. This could lead to race     conditions. However, adding mutex protection directly to these functions causes a deadlock because     pmbus_regulator_notify() (which calls regulator_notifier_call_chain()) is often called with the mutex     already held (e.g., from pmbus_fault_handler()). If a regulator callback then calls one of the now-     protected voltage functions, it will attempt to acquire the same mutex. Rework pmbus_regulator_notify() to     utilize a worker function to send notifications outside of the mutex protection. Events are stored as     atomics in a per-page bitmask and processed by the worker. Initialize the worker and its associated data     during regulator registration, and ensure it is cancelled on device removal using     devm_add_action_or_reset(). While at it, remove the unnecessary include of linux/of.h. (CVE-2026-31486)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31486

high Nessus Plugin ID 309810

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jun 21, 2026, 6:24 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606211824
Version 1.5 May 25, 2026, 10:30 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202605252230
Version 1.3 May 14, 2026, 3:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605140347
Version 1.2 Apr 28, 2026, 8:33 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv2 severity (based on CVE-2026-31486, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata CVSS metrics ("CVSSv2 score" set to 7.2) Plugin Feed: 202604280833
Version 1.1 Apr 23, 2026, 4:31 AM New Plugin Feed: 202604230431