The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() bareudp_fill_metadata_dst() passes     bareudp->sock to udp_tunnel6_dst_lookup() in the IPv6 path without a NULL check. The socket is only     created in bareudp_open() and NULLed in bareudp_stop(), so calling this function while the device is down     triggers a NULL dereference via sock->sk. BUG: kernel NULL pointer dereference, address: 0000000000000018     RIP: 0010:udp_tunnel6_dst_lookup (net/ipv6/ip6_udp_tunnel.c:160) Call Trace: <TASK>     bareudp_fill_metadata_dst (drivers/net/bareudp.c:532) do_execute_actions (net/openvswitch/actions.c:901)     ovs_execute_actions (net/openvswitch/actions.c:1589) ovs_packet_cmd_execute     (net/openvswitch/datapath.c:700) genl_family_rcv_msg_doit (net/netlink/genetlink.c:1114) genl_rcv_msg     (net/netlink/genetlink.c:1209) netlink_rcv_skb (net/netlink/af_netlink.c:2550) </TASK> Add a NULL check     returning -ESHUTDOWN, consistent with the xmit paths in the same driver. (CVE-2026-45846)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-45846

medium Nessus Plugin ID 317075

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Jun 23, 2026, 12:13 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.4 Jun 21, 2026, 6:24 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606211824
Version 1.3 Jun 4, 2026, 6:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606040601
Version 1.2 Jun 3, 2026, 4:54 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606031654
Version 1.1 May 29, 2026, 5:27 PM New Plugin Feed: 202605291727