The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly     handles memory regions (MRs) with page sizes different from the system PAGE_SIZE. The core issue is that     rxe_set_page() is called with mr->page_size step increments, but the page_list stores individual struct     page pointers, each representing PAGE_SIZE of memory. ib_sg_to_page() has ensured that when i>=1 either a)     SG[i-1].dma_end and SG[i].dma_addr are contiguous or b) SG[i-1].dma_end and SG[i].dma_addr are     mr->page_size aligned. This leads to incorrect iova-to-va conversion in scenarios: 1) page_size <     PAGE_SIZE (e.g., MR: 4K, system: 64K): ibmr->iova = 0x181800 sg[0]: dma_addr=0x181800, len=0x800 sg[1]:
    dma_addr=0x173000, len=0x1000 Access iova = 0x181800 + 0x810 = 0x182010 Expected VA: 0x173010 (second SG,     offset 0x10) Before fix: - index = (0x182010 >> 12) - (0x181800 >> 12) = 1 - page_offset = 0x182010 &     0xFFF = 0x10 - xarray[1] stores system page base 0x170000 - Resulting VA: 0x170000 + 0x10 = 0x170010     (wrong) 2) page_size > PAGE_SIZE (e.g., MR: 64K, system: 4K): ibmr->iova = 0x18f800 sg[0]:
    dma_addr=0x18f800, len=0x800 sg[1]: dma_addr=0x170000, len=0x1000 Access iova = 0x18f800 + 0x810 =     0x190010 Expected VA: 0x170010 (second SG, offset 0x10) Before fix: - index = (0x190010 >> 16) - (0x18f800     >> 16) = 1 - page_offset = 0x190010 & 0xFFFF = 0x10 - xarray[1] stores system page for dma_addr 0x170000 -     Resulting VA: system page of 0x170000 + 0x10 = 0x170010 (wrong) Yi Zhang reported a kernel panic[1] years     ago related to this defect. Solution: 1. Replace xarray with pre-allocated rxe_mr_page array for     sequential indexing (all MR page indices are contiguous) 2. Each rxe_mr_page stores both struct page* and     offset within the system page 3. Handle MR page_size != PAGE_SIZE relationships: - page_size > PAGE_SIZE:
    Split MR pages into multiple system pages - page_size <= PAGE_SIZE: Store offset within system page 4. Add     boundary checks and compatibility validation This ensures correct iova-to-va conversion regardless of MR     page size and system PAGE_SIZE relationship, while improving performance through array-based sequential     access. Tests on 4K and 64K PAGE_SIZE hosts: - rdma-core/pytests $ ./build/bin/run_tests.py --dev eth0_rxe
    - blktest: $ TIMEOUT=30 QUICK_RUN=1 USE_RXE=1 NVMET_TRTYPES=rdma ./check nvme srp rnbd [1]     https://lore.kernel.org/all/CAHj4cs9XRqE25jyVw9rj9YugffLn5+f=1znaBEnu1usLOciD+g@mail.gmail.com/T/     (CVE-2026-46325)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46325

critical Nessus Plugin ID 320144

Version 1.16

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.16 Aug 29, 2026, 12:30 AM CVSS metrics ("CVSSv2 score" set to 4.7. "CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-46325, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608290030
Version 1.14 Aug 27, 2026, 3:41 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-46325, severity increased from "Medium" to "High") Plugin Feed: 202608271541
Version 1.13 Aug 21, 2026, 12:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608211245
Version 1.12 Aug 19, 2026, 11:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608191127
Version 1.11 Aug 14, 2026, 12:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141208
Version 1.10 Aug 13, 2026, 10:20 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608131020
Version 1.9 Jul 25, 2026, 1:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607251306
Version 1.8 Jul 16, 2026, 8:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607160827
Version 1.7 Jul 15, 2026, 7:54 AM Detection (updated detection logic) Plugin Feed: 202607150754
Version 1.6 Jul 10, 2026, 10:18 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607101018
Version 1.5 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.4 Jun 15, 2026, 7:29 PM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606151929
Version 1.3 Jun 15, 2026, 12:58 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202606151258
Version 1.2 Jun 10, 2026, 6:51 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606100651
Version 1.1 Jun 10, 2026, 12:51 AM New Plugin Feed: 202606100051