The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions sdca_dev_unregister_functions()     iterates over all SDCA function descriptors and calls sdca_dev_unregister() on each func_dev without     checking for NULL. When a function registration has failed partway through, or the device cleanup races     with probe deferral, func_dev entries may be NULL, leading to a kernel oops: BUG: kernel NULL pointer     dereference, address: 0000000000000040 RIP: 0010:device_del+0x1e/0x3e0 Call Trace:
    sdca_dev_unregister_functions+0x37/0x60 [snd_soc_sdca] release_nodes+0x35/0xb0     devres_release_all+0x90/0x100 device_unbind_cleanup+0xe/0x80 device_release_driver_internal+0x1c1/0x200     bus_remove_device+0xc6/0x130 device_del+0x161/0x3e0 device_unregister+0x17/0x60 sdw_delete_slave+0xb6/0xd0     [soundwire_bus] sdw_bus_master_delete+0x1e/0x50 [soundwire_bus] ... sof_probe_work+0x19/0x30 [snd_sof]     This was observed on a Lenovo ThinkPad X1 Carbon G14 (Panther Lake) with the SOF audio driver probe     failing due to missing Panther Lake firmware, causing the subsequent cleanup of SoundWire devices to     trigger the crash. Fix this with three changes: 1) Add a NULL guard in sdca_dev_unregister() so that     callers do not need to pre-validate the pointer (defense in depth). 2) In sdca_dev_unregister_functions(),     skip NULL func_dev entries and clear func_dev to NULL after unregistration, making the function idempotent     and safe against double-invocation. 3) In sdca_dev_register_functions(), roll back all previously     registered functions when a later one fails, so the function array is never left in a partially-populated     state. (CVE-2026-53348)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53348

medium Nessus Plugin ID 324895

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jul 23, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202607230843
Version 1.3 Jul 17, 2026, 5:47 AM Detection (updated detection logic) Plugin Feed: 202607170547
Version 1.2 Jul 7, 2026, 5:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607070547
Version 1.1 Jul 4, 2026, 4:43 PM New Plugin Feed: 202607041643