The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index     to prevent OOB kernel read in madvise When user provides a bogus pat_index value through the madvise     IOCTL, the xe_pat_index_get_coh_mode() function performs an array access without validating bounds. This     allows a malicious user to trigger an out-of-bounds kernel read from the xe->pat.table array. The     vulnerability exists because the validation in madvise_args_are_sane() directly calls     xe_pat_index_get_coh_mode(xe, args->pat_index.val) without first checking if pat_index is within [0,     xe->pat.n_entries). Although xe_pat_index_get_coh_mode() has a WARN_ON to catch this in debug builds, it     still performs the unsafe array access in production kernels. v2(Matthew Auld) - Using     array_index_nospec() to mitigate spectre attacks when the value is used v3(Matthew Auld) - Put the     declarations at the start of the block (cherry picked from commit     944a3329b05510d55c69c2ef455136e2fc02de29) (CVE-2026-43280)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43280

high Nessus Plugin ID 313024

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 20, 2026, 10:33 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.2 May 8, 2026, 1:55 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
Version 1.1 May 7, 2026, 1:46 PM New Plugin Feed: 202605071346