The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - idpf: fix double free and use-after-free in aux device error paths When auxiliary_device_add() fails in     idpf_plug_vport_aux_dev() or idpf_plug_core_aux_dev(), the err_aux_dev_add label calls     auxiliary_device_uninit() and falls through to err_aux_dev_init. The uninit call will trigger     put_device(), which invokes the release callback (idpf_vport_adev_release / idpf_core_adev_release) that     frees iadev. The fall-through then reads adev->id from the freed iadev for ida_free() and double-frees     iadev with kfree(). Free the IDA slot and clear the back-pointer before uninit, while adev is still valid,     then return immediately. Commit 65637c3a1811 (idpf: fix UAF in RDMA core aux dev deinitialization) fixed     the same use-after-free in the matching unplug path in this file but missed both probe error paths.
    (CVE-2026-53286)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53286

high Nessus Plugin ID 323723

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.1

Version 1.9 Jul 21, 2026, 8:31 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53286, severity decreased from "High" to "Medium") Plugin Feed: 202607212031
Version 1.8 Jul 21, 2026, 12:41 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53286, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin Feed: 202607210041
Version 1.7 Jul 9, 2026, 6:27 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53286, severity decreased from "High" to "Medium") Plugin Feed: 202607091827
Version 1.6 Jul 8, 2026, 11:53 AM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C". "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53286, severity decreased from "High" to "Medium". based on CVE-2026-53286, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607081153
Version 1.4 Jul 6, 2026, 4:58 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-53286, severity increased from "Low" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607060458
Version 1.3 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.1 Jun 30, 2026, 11:58 AM New Plugin Feed: 202606301158