The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ovl: keep err zero after successful     ovl_cache_get() ovl_iterate_merged() stores PTR_ERR(cache) in err before checking IS_ERR(cache). On     success err holds the truncated cache pointer and can be returned as a bogus non-zero error. The syzbot     reproducer reaches this through overlay-on-overlay readdir: getdents64 iterate_dir(outer overlay file)     ovl_iterate_merged() ovl_cache_get() ovl_dir_read_merged() ovl_dir_read() iterate_dir(inner overlay file)     ovl_iterate_merged() Only compute PTR_ERR(cache) on the error path. (CVE-2026-53174)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53174

high Nessus Plugin ID 323461

Version 1.12