The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net: shaper: rework the VALID marking     (again) Recent commit changed the semantics from NOT_VALID to VALID. I didn't realize that the flags are     not stored atomically with the entry in XArray. There's still a race of reader observing a VALID mark for     a slot, getting interrupted, writer replacing the entry with a different one, reader continuing, fetching     the entry which is now a different pointer than the pointer for which VALID was meant. The biggest     consequence of this is that we may see a UAF since net_shaper_rollback() assumed that entries without     VALID can be freed without observing RCU. Looks like the XArray marks are buying us nothing at this point.
    Let's convert the code to an explicit valid field. The smp_load_acquire() / smp_store_release() barriers     are marginally cleaner. (CVE-2026-64027)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64027

high Nessus Plugin ID 328128

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Aug 6, 2026, 3:43 PM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2026-64027, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608061543
Version 1.5 Aug 3, 2026, 1:05 PM CVSSv3 score source (changed from "CVE-2026-64027" to none) Plugin Feed: 202608031305
Version 1.4 Aug 1, 2026, 2:26 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-64027, severity increased from "Low" to "High") CVSSv3 score source (set to "CVE-2026-64027") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010226
Version 1.3 Jul 29, 2026, 6:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290641
Version 1.2 Jul 25, 2026, 1:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607251306
Version 1.1 Jul 21, 2026, 12:41 AM New Plugin Feed: 202607210041