The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device     before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error occurs that is     handled gracefully. Consequently, the initialization flow proceeds to call mlx5_ldev_add_debugfs() even     when there is no valid LAG context. mlx5_ldev_add_debugfs() blindly created the debugfs directory and     attributes. This exposed interfaces (like the members file) that rely on a valid ldev pointer, leading to     potential NULL pointer dereferences if accessed when ldev is NULL. Add a check to verify that     mlx5_lag_dev(dev) returns a valid pointer before attempting to create the debugfs entries.
    (CVE-2026-43013)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43013

high Nessus Plugin ID 311659

Version 1.2

Version 1.1

Version 1.2 May 3, 2026, 4:59 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.1 May 2, 2026, 11:12 PM New Plugin Feed: 202605022312