The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amdgpu: validate doorbell_offset in user queue creation amdgpu_userq_get_doorbell_index() passes the     user-provided doorbell_offset to amdgpu_doorbell_index_on_bar() without bounds checking. An arbitrarily     large doorbell_offset can cause the calculated doorbell index to fall outside the allocated doorbell BO,     potentially corrupting kernel doorbell space. Validate that doorbell_offset falls within the doorbell BO     before computing the BAR index, using u64 arithmetic to prevent overflow. (cherry picked from commit     de1ef4ffd70e1d15f0bf584fd22b1f28cbd5e2ec) (CVE-2026-31766)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31766

high Nessus Plugin ID 312195

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.5 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.3 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSSv2 severity (based on CVE-2026-31766, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.2 May 8, 2026, 1:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
Version 1.1 May 5, 2026, 10:13 PM New Plugin Feed: 202605052213