The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and     dst_reg are pointers to the same bpf_reg_state in adjust_reg_min_max_vals(). The latter first modifies the     dst_reg in-place, and later in the delta tracking, the subsequent     is_reg_const(src_reg)/reg_const_value(src_reg) reads the post-{add,sub} value instead of the original     source. This is problematic since it sets an incorrect delta, which sync_linked_regs() then propagates to     linked registers, thus creating a verifier-vs-runtime mismatch. Fix it by just skipping this corner case.
    (CVE-2026-53092)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53092

medium Nessus Plugin ID 322594

Version 1.7