The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a truncated response but a     large OutputBufferLength, and terminates the EA list early, check_wsl_eas() returns success without     validating that the entire OutputBufferLength fits within iov_len. Then smb2_compound_op() does:
    memcpy(idata->wsl.eas, data[0], size[0]); Where size[0] is OutputBufferLength. If iov_len is smaller than     size[0], memcpy can read beyond the end of the rsp_iov allocation and leak adjacent kernel heap memory.
    (CVE-2026-46155)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46155

critical Nessus Plugin ID 318444

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jul 6, 2026, 3:53 PM Detection (updated detection logic) Plugin Feed: 202607061553
Version 1.5 Jul 4, 2026, 4:43 PM Detection (updated detection logic) Plugin Feed: 202607041643
Version 1.4 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.3 Jun 23, 2026, 12:13 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.2 Jun 5, 2026, 7:13 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-46155, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606051913
Version 1.1 Jun 4, 2026, 6:01 AM New Plugin Feed: 202606040601