The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES Due to a rustc bug [1] the -Cforce-     unwind-tables=y flag only emits the uwtable annotation for functions, but not for the module. This means     that compiler-generated functions such as 'asan.module_ctor' do not receive the uwtable annotation. When     CONFIG_UNWIND_PATCH_PAC_INTO_SCS is enabled, this leads to boot failures because the dwarf information     emitted for the kasan constructors is wrong, which causes the SCS boot patching code to patch the     constructor in an illegal manner. Specifically, the paciasp instruction is patched, but the autiasp     instruction is not. This mismatch leads to a crash when the constructor is called during boot.
    ================================================================== BUG: KASAN: global-out-of-bounds in     do_basic_setup+0x4c/0x90 Read of size 8 at addr ffffffe3cc7eb488 by task swapper/0/1 Specifically the     faulting instruction is the (*fn)() to invoke the constructor in do_ctors() of the init/main.c file. Once     the fix lands in rustc, this flag can be made conditional on the rustc version. Note that passing the flag     on a rustc with the fix present has no effect. [ The fix [1] has landed for Rust 1.98.0 (expected release     on 2026-08-20). Thus add a version check as discussed. - Miguel ] [ Adjusted link and comment. - Miguel ]     (CVE-2026-53346)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53346

high Nessus Plugin ID 324912

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jul 25, 2026, 1:06 PM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P") CVSSv2 severity (based on CVE-2026-53346, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin Feed: 202607251306
Version 1.3 Jul 23, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-53346, severity increased from "Low" to "Medium") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202607230843
Version 1.2 Jul 7, 2026, 5:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607070547
Version 1.1 Jul 4, 2026, 4:43 PM New Plugin Feed: 202607041643