The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - zram: fix use-after-free in zram_bvec_write_partial() zram_read_page() picks the sync or async backing     device read path based on whether the parent bio is NULL. zram_bvec_write_partial() passes its parent bio     down, so for ZRAM_WB slots the read is dispatched asynchronously and zram_read_page() returns 0 while the     bio is still in flight. The caller then runs memcpy_from_bvec(), zram_write_page() and __free_page() on     the buffer, leaving the async read to write into a freed page. zram_bvec_read_partial() was switched to     NULL in commit 4e3c87b9421d (zram: fix synchronous reads) for the same reason; the write_partial     counterpart was missed. (CVE-2026-53185)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53185

high Nessus Plugin ID 323395

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.7 Jul 15, 2026, 7:54 AM Detection (updated detection logic) Plugin Feed: 202607150754
Version 1.6 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.5 Jul 6, 2026, 4:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607060458
Version 1.4 Jul 2, 2026, 3:38 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.2 Jun 29, 2026, 10:30 AM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202606291030
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421