The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() vidi_connection_ioctl()     retrieves the driver_data from drm_dev->dev to obtain a struct vidi_context pointer. However, drm_dev->dev     is the exynos-drm master device, and the driver_data contained therein is not the vidi component device,     but a completely different device. This can lead to various bugs, ranging from null pointer dereferences     and garbage value accesses to, in unlucky cases, out-of-bounds errors, use-after-free errors, and more. To     resolve this issue, we need to store/delete the vidi device pointer in exynos_drm_private->vidi_dev during     bind/unbind, and then read this exynos_drm_private->vidi_dev within ioctl() to obtain the correct struct     vidi_context pointer. (CVE-2026-45956)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-45956

high Nessus Plugin ID 317176

Version 1.7