The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious Synchronous External     Abort exceptions (ESR=0x96000010) and kernel crashes on Monaco-based platforms. These faults are caused     by the kernel inadvertently accessing hypervisor-owned memory that is not properly marked as reserved.
    >From boot log, The Qualcomm hypervisor reports the memory range at 0x91a80000 of size 0x80000 (512 KiB)     as hypervisor-owned: qhee_hyp_assign_remove_memory: 0x91a80000/0x80000 -> ret 0 However, the EFI memory     map provided by firmware only reserves the subrange 0x91a400000x91a87fff (288 KiB). The remaining portion     (0x91a880000x91afffff) is incorrectly reported as conventional memory (from efi debug): efi:
    0x000091a40000-0x000091a87fff [Reserved...] efi: 0x000091a88000-0x0000938fffff [Conventional...] As a     result, the allocator may hand out PFNs inside the hypervisor owned region, causing fatal aborts when the     kernel accesses those addresses. Add a reserved-memory carveout for the Gunyah hypervisor metadata at     0x91a80000 (512 KiB) and mark it as no-map so Linux does not map or allocate from this area. For the     record: Hyp version: gunyah-e78adb36e debug (2025-11-17 05:38:05 UTC) UEFI Ver:
    6.0.260122.BOOT.MXF.1.0.c1-00449-KODIAKLA-1 (CVE-2026-43347)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43347

high Nessus Plugin ID 314392

Version 1.4

Version 1.3

Version 1.1

Version 1.4 May 29, 2026, 5:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605291727
Version 1.3 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.1 May 14, 2026, 3:47 AM New Plugin Feed: 202605140347