The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list mlx5_query_nic_vport_mac_list() sizes     its firmware command buffer using the PF's log_max_current_uc/mc_list capabilities. When querying a VF     vport with a larger configured max (via devlink), the firmware response can overflow this buffer: BUG:
    KASAN: slab-out-of-bounds in mlx5_query_nic_vport_mac_list+0x453/0x4c0 [mlx5_core] Read of size 4 at addr     ff1100013ffc8a12 by task kworker/u96:2/385 CPU: 12 UID: 0 PID: 385 Comm: kworker/u96:2 Not tainted     7.0.0-rc6+ #1 PREEMPT Hardware name: QEMU Standard PC (Q35 + ICH9, 2009) Workqueue: mlx5_esw_wq     esw_vport_change_handler [mlx5_core] Call Trace: <TASK> dump_stack_lvl+0x69/0xa0 print_report+0x176/0x4e4     kasan_report+0xc8/0x100 mlx5_query_nic_vport_mac_list+0x453/0x4c0 [mlx5_core]     esw_update_vport_addr_list+0x2e3/0xda0 [mlx5_core] esw_vport_change_handle_locked+0xa1f/0x1060 [mlx5_core]     esw_vport_change_handler+0x6a/0x90 [mlx5_core] process_one_work+0x87f/0x15e0 worker_thread+0x62b/0x1020     kthread+0x375/0x490 ret_from_fork+0x4dc/0x810 ret_from_fork_asm+0x11/0x20 </TASK> Fix by querying the     vport's own HCA caps to size the buffer correctly. Refactor the function to allocate and return the MAC     list internally, removing the caller's dependency on knowing the correct max. (CVE-2026-53230)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53230

high Nessus Plugin ID 323296

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jul 16, 2026, 9:04 PM CVSSv3 score source (changed from "CVE-2026-53230" to none) Plugin Feed: 202607162104
Version 1.5 Jul 15, 2026, 2:58 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-53230, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2026-53230") Detection (updated detection logic) Plugin Feed: 202607150258
Version 1.4 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.3 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.2 Jun 28, 2026, 8:12 PM CVSS metrics ("CVSSv3 score" set to 8.7) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606282012
Version 1.1 Jun 28, 2026, 7:50 AM New Plugin Feed: 202606280750