The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown mtk_free_dev() calls     metadata_dst_free() which frees the metadata_dst with kfree() immediately, bypassing the RCU grace period.
    In the RX path, skb_dst_set_noref() sets a non-refcounted pointer from the skb to the metadata_dst. This     function requires RCU read-side protection and the dst must remain valid until all RCU readers complete.
    Since metadata_dst_free() calls kfree() directly, a use-after-free can occur if any skb still holds a     noref pointer to the dst when the driver tears it down. Replace metadata_dst_free() with dst_release()     which properly goes through the refcount path: when the refcount drops to zero, it schedules the actual     free via call_rcu_hurry(), ensuring all RCU readers have completed before the memory is freed.
    (CVE-2026-53247)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53247

critical Nessus Plugin ID 323383

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jul 10, 2026, 4:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607101601
Version 1.3 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.2 Jun 29, 2026, 10:30 AM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202606291030
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421