The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp Patch series mm/damon/core:
    validate damos_quota_goal->nid. node_mem[cg]_{used,free}_bp DAMOS quota goals receive the node id. The     node id is used for si_meminfo_node() and NODE_DATA() without proper validation. As a result, privileged     users can trigger an out of bounds memory access using DAMON_SYSFS. Fix the issues. The issue was     originally reported [1] with a fix by another author. The original author announced [2] that they will     stop working including the fix that was still in the review stage. Hence I'm restarting this. This patch     (of 2): Users can set damos_quota_goal->nid with arbitrary value for node_mem_{used,free}_bp. But DAMON     core is using those for si_meminfo_node() without the validation of the value. This can result in out of     bounds memory access. The issue can actually triggered using DAMON user-space tool (damo), like below. $     sudo ./damo start --damos_action stat \ --damos_quota_goal node_mem_used_bp 50% -1 \
    --damos_quota_interval 1s $ sudo dmesg [...] [ 65.565986] Unable to handle kernel NULL pointer dereference     at virtual address 0000000000000098 Fix this issue by adding the validation of the given node. If an     invalid node id is given, it returns 0% for used memory ratio, and 100% for free memory ratio.
    (CVE-2026-46020)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46020

high Nessus Plugin ID 318421

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jun 23, 2026, 12:45 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202606231245
Version 1.3 Jun 23, 2026, 12:13 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.2 Jun 17, 2026, 9:10 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202606170910
Version 1.1 Jun 4, 2026, 6:01 AM New Plugin Feed: 202606040601