The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (slub, shmem, ttm, etc.) use     page->private but don't clear it before freeing pages. When these pages are later allocated as high-order     pages and split via split_page(), tail pages retain stale page->private values. This causes a use-after-     free in the swap subsystem. The swap code uses page->private to track swap count continuations, assuming     freshly allocated pages have page->private == 0. When stale values are present, swap_count_continued()     incorrectly assumes the continuation list is valid and iterates over uninitialized page->lru containing     LIST_POISON values, causing a crash: KASAN: maybe wild-memory-access in range     [0xdead000000000100-0xdead000000000107] RIP: 0010:__do_sys_swapoff+0x1151/0x1860 Fix this by clearing     page->private in free_pages_prepare(), ensuring all freed pages have clean state regardless of previous     use. (CVE-2026-43303)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43303

high Nessus Plugin ID 313387

Version 1.7

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.7 May 29, 2026, 11:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605292345
Version 1.5 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.3 May 14, 2026, 3:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605140347
Version 1.2 May 12, 2026, 8:32 AM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202605120832
Version 1.1 May 9, 2026, 2:20 AM New Plugin Feed: 202605090220