The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized     against file->f_cred->user_ns, while unattached administrative ioctls operate on current->nsproxy->net_ns.
    As a result, a local unprivileged user can create a new user namespace with CLONE_NEWUSER, gain     CAP_NET_ADMIN only in that new user namespace, and still issue PPPIOCNEWUNIT, PPPIOCATTACH, or     PPPIOCATTCHAN against an inherited network namespace. Require CAP_NET_ADMIN in the user namespace that     owns the target network namespace before handling unattached PPP administrative ioctls. This preserves     normal pppd operation in the network namespace it is actually privileged in, while rejecting the userns-     only inherited-netns case. (CVE-2026-53075)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53075

high Nessus Plugin ID 322618

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.8 Jul 4, 2026, 4:43 PM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53075, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.6 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.5 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.4 Jun 29, 2026, 10:30 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") Plugin Feed: 202606291030
Version 1.3 Jun 28, 2026, 2:21 PM CVSS metrics ("CVSSv3 score" set to 7.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H") CVSSv2 severity (based on CVE-2026-53075, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202606281421
Version 1.2 Jun 26, 2026, 4:08 PM Exploit attributes ("Exploit available" set to "True") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:U/RC:C") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202606261608
Version 1.1 Jun 25, 2026, 9:10 AM New Plugin Feed: 202606250910