The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() When the mt7996 pci chip is     detaching, the mt7996_crash_data is released in mt7996_coredump_unregister(). However, the work item     dump_work may still be running or pending, leading to UAF bugs when the already freed crash_data is     dereferenced again in mt7996_mac_dump_work(). The race condition can occur as follows: CPU 0 (removal     path) | CPU 1 (workqueue) mt7996_pci_remove() | mt7996_sys_recovery_set() mt7996_unregister_device() |     mt7996_reset() mt7996_coredump_unregister() | queue_work() vfree(dev->coredump.crash_data) |     mt7996_mac_dump_work() | crash_data-> // UAF Fix this by ensuring dump_work is properly canceled before     the crash_data is deallocated. Add cancel_work_sync() in mt7996_unregister_device() to synchronize with     any pending or executing dump work. (CVE-2026-53097)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53097

high Nessus Plugin ID 323455

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jul 22, 2026, 11:38 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202607221138
Version 1.5 Jul 21, 2026, 12:41 AM Detection (updated detection logic) Plugin Feed: 202607210041
Version 1.4 Jul 10, 2026, 4:01 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202607101601
Version 1.3 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.2 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.1 Jun 28, 2026, 8:12 PM New Plugin Feed: 202606282012