The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned     to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails, the function     calls rxe_queue_cleanup() to free the queue, but leaves the now-invalid pointer in 'srq->rq.queue'. The     caller of rxe_srq_from_init() (rxe_create_srq) eventually calls rxe_srq_cleanup() upon receiving the     error, which triggers a second rxe_queue_cleanup() on the same memory, leading to a double free. The call     trace looks like this: kmem_cache_free+0x.../0x... rxe_queue_cleanup+0x1a/0x30 [rdma_rxe]     rxe_srq_cleanup+0x42/0x60 [rdma_rxe] rxe_elem_release+0x31/0x70 [rdma_rxe] rxe_create_srq+0x12b/0x1a0     [rdma_rxe] ib_create_srq_user+0x9a/0x150 [ib_core] Fix this by moving 'srq->rq.queue = q' after     copy_to_user. (CVE-2026-45852)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-45852

high Nessus Plugin ID 317231

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.9 Jun 21, 2026, 5:21 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606210521
Version 1.8 Jun 12, 2026, 7:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606120727
Version 1.6 Jun 11, 2026, 12:32 PM Detection (updated detection logic) Plugin Feed: 202606111232
Version 1.5 Jun 4, 2026, 6:01 AM Plugin metadata Detection (updated detection logic) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 7.2) Plugin Feed: 202606040601
Version 1.3 May 30, 2026, 6:41 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS metrics ("CVSSv2 score" set to none) Plugin metadata Detection (updated detection logic) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) Plugin Feed: 202605300641
Version 1.2 May 29, 2026, 5:27 PM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 score" set to 7.1. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) New Plugin metadata Plugin Feed: 202605291727