The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients During a warm reset flow, the     cl->device pointer may be NULL if the reset occurs while clients are still being enumerated. Accessing     cl->device->reference_count without a NULL check leads to a kernel panic. This issue was identified during     multi-unit warm reboot stress clycles. Add a defensive NULL check for cl->device to ensure stability under     such intensive testing conditions. KASAN: null-ptr-deref in range [0000000000000000-0000000000000007]     Workqueue: ish_fw_update_wq fw_reset_work_fn Call Trace: ishtp_bus_remove_all_clients+0xbe/0x130     [intel_ishtp] ishtp_reset_handler+0x85/0x1a0 [intel_ishtp] fw_reset_work_fn+0x8a/0xc0 [intel_ish_ipc]     (CVE-2026-45877)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-45877

medium Nessus Plugin ID 317160

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.9 Jul 15, 2026, 2:58 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-45877, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2026-45877") Detection (updated detection logic) Plugin Feed: 202607150258
Version 1.8 Jul 10, 2026, 10:18 AM Detection (updated detection logic) Plugin Feed: 202607101018
Version 1.7 Jul 6, 2026, 3:53 PM Detection (updated detection logic) Plugin Feed: 202607061553
Version 1.6 Jul 4, 2026, 4:43 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202607041643
Version 1.4 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.3 Jun 4, 2026, 6:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606040601
Version 1.2 May 29, 2026, 5:27 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C". "CVSSv3 score" set to 5.5. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-45877, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) New Plugin metadata Plugin Feed: 202605291727