The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add()     fails, cpufreq_dbs_governor_init() calls kobject_put(&dbs_data->attr_set.kobj). The kobject release     callback cpufreq_dbs_data_release() calls gov->exit(dbs_data) and kfree(dbs_data), but the current error     path then calls gov->exit(dbs_data) and kfree(dbs_data) again, causing a double free. Keep the direct     kfree(dbs_data) for the gov->init() failure path, but after kobject_init_and_add() has been called, let     kobject_put() handle the cleanup through cpufreq_dbs_data_release(). (CVE-2026-43328)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43328

high Nessus Plugin ID 313309

Version 1.8

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.8 May 30, 2026, 6:41 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605300641
Version 1.5 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.3 May 21, 2026, 4:37 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605210437
Version 1.2 May 19, 2026, 3:29 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-43328, severity decreased from "High" to "Medium") Plugin Feed: 202605191529
Version 1.1 May 9, 2026, 2:20 AM New Plugin Feed: 202605090220