The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm: Set old handle to NULL before prime swap in change_handle There was a potential race condition in     change_handle. The ioctl briefly had a single object with two idr entries; a concurrent gem_close could     delete the object and remove one of the handles while leaving the other one dangling, which could     subsequently be dereferenced for a use-after-free. To fix this, do the same dance that gem_close itself     does. (f6cd7daecff5 drm: Release driver references to handle before making it available again) First     idr_replace the old handle to NULL. Later, if the prime operations are successful, actually close it.
    create_tail required a similar dance to avoid a similar problem. (bd46cece51a3 drm/gem: Fix race in     drm_gem_handle_create_tail()) It idr_allocs the new handle with NULL, then swaps in the correct object     later to avoid races. We don't need to do that here, since the only operations that could race are     drm_prime, and change_handle holds the prime lock for the entire duration. v2: cleanups of error paths     (CVE-2026-46215)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46215

high Nessus Plugin ID 318453

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Jul 8, 2026, 11:53 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607081153
Version 1.6 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.5 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.4 Jun 23, 2026, 12:13 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.3 Jun 22, 2026, 8:21 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:U/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202606220821
Version 1.2 Jun 5, 2026, 7:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606051913
Version 1.1 Jun 4, 2026, 6:01 AM New Plugin Feed: 202606040601