The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error     recovery services to run on all subordinate devices regardless of administrative state. The     .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via     bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using     bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a     closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing     IRQs. (CVE-2026-53177)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53177

medium Nessus Plugin ID 323568

Version 1.10