The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - futex: Clear stale exiting pointer in futex_lock_pi() retry path Fuzzying/stressing futexes triggered:
    WARNING: kernel/futex/core.c:825 at wait_for_owner_exiting+0x7a/0x80, CPU#11: futex_lock_pi_s/524 When     futex_lock_pi_atomic() sees the owner is exiting, it returns -EBUSY and stores a refcounted task pointer     in 'exiting'. After wait_for_owner_exiting() consumes that reference, the local pointer is never reset to     nil. Upon a retry, if futex_lock_pi_atomic() returns a different error, the bogus pointer is passed to     wait_for_owner_exiting(). CPU0 CPU1 CPU2 futex_lock_pi(uaddr) // acquires the PI futex exit()     futex_cleanup_begin() futex_state = EXITING; futex_lock_pi(uaddr) futex_lock_pi_atomic()     attach_to_pi_owner() // observes EXITING *exiting = owner; // takes ref return -EBUSY     wait_for_owner_exiting(-EBUSY, owner) put_task_struct(); // drops ref // exiting still points to owner     goto retry; futex_lock_pi_atomic() lock_pi_update_atomic() cmpxchg(uaddr) *uaddr ^= WAITERS // whatever //     value changed return -EAGAIN; wait_for_owner_exiting(-EAGAIN, exiting) // stale WARN_ON_ONCE(exiting) Fix     this by resetting upon retry, essentially aligning it with requeue_pi. (CVE-2026-31555)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31555

medium Nessus Plugin ID 310177

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.10 May 5, 2026, 11:15 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202605051115
Version 1.9 May 5, 2026, 5:46 AM Detection (updated detection logic) Plugin Feed: 202605050546
Version 1.8 May 3, 2026, 4:59 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.7 May 2, 2026, 11:12 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.6 Apr 30, 2026, 4:16 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202604301616
Version 1.5 Apr 30, 2026, 3:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604300355
Version 1.4 Apr 28, 2026, 1:11 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604281311
Version 1.3 Apr 28, 2026, 8:33 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202604280833
Version 1.2 Apr 25, 2026, 4:14 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604251614
Version 1.1 Apr 25, 2026, 1:42 AM New Plugin Feed: 202604250142