The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - thunderbolt: Limit XDomain response copy to actual frame size tb_xdomain_copy() copies req->response_size     bytes from the received packet buffer regardless of the actual frame size. When a short response arrives,     this reads past the valid frame data in the DMA pool buffer into stale contents from previous     transactions. Use the minimum of frame size and expected response size for the copy length.
    (CVE-2026-53146)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53146

high Nessus Plugin ID 323546

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.8 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.7 Aug 14, 2026, 12:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141208
Version 1.6 Jul 25, 2026, 1:06 PM Detection (updated detection logic) Plugin Feed: 202607251306
Version 1.5 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.4 Jul 4, 2026, 4:43 PM CVSS metrics ("CVSSv2 score" set to 7.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-53146, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.2 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.1 Jun 28, 2026, 8:12 PM New Plugin Feed: 202606282012