The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths During code review, Joseph found that     ext4_fc_replay_inode() calls ext4_get_fc_inode_loc() to get the inode location, which holds a reference to     iloc.bh that must be released via brelse(). However, several error paths jump to the 'out' label without     releasing iloc.bh: - ext4_handle_dirty_metadata() failure - sync_dirty_buffer() failure -     ext4_mark_inode_used() failure - ext4_iget() failure Fix this by introducing an 'out_brelse' label placed     just before the existing 'out' label to ensure iloc.bh is always released. Additionally, make     ext4_fc_replay_inode() propagate errors properly instead of always returning 0. (CVE-2026-43066)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43066

high Nessus Plugin ID 312305

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.4 May 20, 2026, 10:33 PM Detection (updated detection logic) Plugin Feed: 202605202233
Version 1.3 May 8, 2026, 1:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
Version 1.2 May 7, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-43066, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605070804
Version 1.1 May 6, 2026, 4:16 AM New Plugin Feed: 202605060416