The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write The driver obtains sw_attr.num_ifs from     firmware via dpsw_get_attributes() but never validates it against DPSW_MAX_IF (64). This value controls     iteration in dpaa2_switch_fdb_get_flood_cfg(), which writes port indices into the fixed-size     cfg->if_id[DPSW_MAX_IF] array. When firmware reports num_ifs >= 64, the loop can write past the array     bounds. Add a bound check for num_ifs in dpaa2_switch_init(). dpaa2_switch_fdb_get_flood_cfg() appends the     control interface (port num_ifs) after all matched ports. When num_ifs == DPSW_MAX_IF and all ports match     the flood filter, the loop fills all 64 slots and the control interface write overflows by one entry. The     check uses >= because num_ifs == DPSW_MAX_IF is also functionally broken. build_if_id_bitmap() silently     drops any ID >= 64: if (id[i] < DPSW_MAX_IF) bmap[id[i] / 64] |= ... (CVE-2026-43205)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43205

high Nessus Plugin ID 312988

Version 1.7

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.4 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-43205, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin Feed: 202605202233
Version 1.3 May 12, 2026, 8:32 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202605120832
Version 1.2 May 8, 2026, 1:55 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSSv2 severity (based on CVE-2026-43205, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
Version 1.1 May 7, 2026, 1:46 PM New Plugin Feed: 202605071346