The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async [Why&How]     dc_process_dmub_aux_transfer_async() copies payload->length bytes into a 16-byte stack buffer     (dpaux.data[16]) guarded only by an ASSERT(), which is a no-op in release builds. If a caller ever passes     length > 16 this results in a stack buffer overflow via memcpy. Additionally, link_index is used to     dereference dc->links[] without bounds checking against dc->link_count, risking an out-of-bounds access.
    Replace the ASSERT with a hard runtime check that returns false when payload->length exceeds the     destination buffer size, and add a bounds check for link_index before it is used. (cherry picked from     commit ba4caa9fecdf7a38f98c878ad05a8a64148b6881) (CVE-2026-64219)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64219

high Nessus Plugin ID 329714

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Aug 1, 2026, 6:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010658
Version 1.7 Aug 1, 2026, 2:26 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-64219, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010226
Version 1.6 Jul 30, 2026, 11:45 AM CVSSv3 score source (changed from "CVE-2026-64219" to none) Plugin Feed: 202607301145
Version 1.5 Jul 29, 2026, 6:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290641
Version 1.4 Jul 29, 2026, 12:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290029
Version 1.3 Jul 28, 2026, 3:13 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2026-64219, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607280313
Version 1.2 Jul 27, 2026, 9:02 PM Detection (Plugin has been deprecated) Plugin Feed: 202607272102
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011