The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - serial: 8250: Fix TX deadlock when using DMA `dmaengine_terminate_async` does not guarantee that the     `__dma_tx_complete` callback will run. The callback is currently the only place where `dma->tx_running`     gets cleared. If the transaction is canceled and the callback never runs, then `dma->tx_running` will     never get cleared and we will never schedule new TX DMA transactions again. This change makes it so we     clear `dma->tx_running` after we terminate the DMA transaction. This is safe because     `serial8250_tx_dma_flush` is holding the UART port lock. The first thing the callback does is also grab     the UART port lock, so access to `dma->tx_running` is serialized. (CVE-2026-43061)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43061

high Nessus Plugin ID 312273

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.4 May 20, 2026, 10:33 PM Detection (updated detection logic) Plugin Feed: 202605202233
Version 1.3 May 8, 2026, 1:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
Version 1.2 May 7, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605070804
Version 1.1 May 6, 2026, 4:16 AM New Plugin Feed: 202605060416