The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and,     when the second argument is true, also allocates a completion structure. Currently, the error handling     path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion     structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both     the command structure and the associated completion structure. Since the command structure is allocated     with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by     xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The     tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is     currently under active development and not yet publicly available, but we plan to open-source it after our     research is published. The bug was originally detected on v6.13-rc1 using our static analysis tool, and we     have verified that the issue persists in the latest mainline kernel. We performed build testing on x86_64     with allyesconfig using GCC=11.4.0. Since triggering these error paths in xhci_disable_slot() requires     specific hardware conditions or abnormal state, we were unable to construct a test case to reliably     trigger these specific error paths at runtime. (CVE-2026-43432)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43432

medium Nessus Plugin ID 313404

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.3

Version 1.2

Version 1.1

Version 1.14 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.13 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.12 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.11 Jun 28, 2026, 8:12 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606282012
Version 1.10 Jun 12, 2026, 7:27 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202606120727
Version 1.9 May 30, 2026, 6:41 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605300641
Version 1.8 May 29, 2026, 5:27 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605291727
Version 1.7 May 26, 2026, 12:31 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202605261231
Version 1.6 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.3 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.2 May 9, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-43432, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605090804
Version 1.1 May 9, 2026, 2:20 AM New Plugin Feed: 202605090220