The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g. when a userspace timer     (CONFIG_SND_UTIMER) gets closed and snd_timer_free() is called, it tries to detach the timer instances and     release the resources. However, it's still possible that other in-flight tasks are holding the timer     instance where the to-be-deleted timer object is associated, and this may lead to racy accesses.
    Fortunately, most of ioctls dealing with the timer instance list already have the protection with     register_mutex, and this also avoids such races. But, SNDRV_TIMER_IOCTL_PARAMS isn't protected, hence the     concurrent ioctl may lead to use-after-free. This patch just adds the guard with register_mutex to protect     snd_timer_user_params() for covering the code path as a quick workaround. It's no hot-path but rather a     rarely issued ioctl, so the performance penalty doesn't matter. (CVE-2026-53192)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53192

high Nessus Plugin ID 323370

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Jul 10, 2026, 4:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607101601
Version 1.6 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.4 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.3 Jun 29, 2026, 7:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606291906
Version 1.2 Jun 29, 2026, 10:30 AM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202606291030
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421