The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on     allocation is requested, for kmalloc() we generally have to zero the full object size even if a smaller     size is requested, in order to provide krealloc()'s __GFP_ZERO guarantees. But if we track the requested     size, krealloc() uses that information to do the right thing, so we can zero only the requested size. With     red zoning also enabled, any extra size became part of the red zone, so it must not be zeroed and thus we     must zero only the requested size. However the current check is imprecise, and will trigger also when only     SLAB_RED_ZONE is enabled without SLAB_STORE_USER (which enables tracking the requested size). This means     enabling red zoning alone can compromise krealloc()'s __GFP_ZERO contract. Fix this by using     slub_debug_orig_size() instead, which is the exact check for whether the requested size is tracked. We     don't need to care if red zoning is also enabled or not. Also update and expand the comment accordingly.
    (CVE-2026-64368)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64368

high Nessus Plugin ID 329938

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.7 Aug 12, 2026, 1:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608120109
Version 1.6 Aug 11, 2026, 3:40 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608111540
Version 1.5 Aug 7, 2026, 5:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608071710
Version 1.4 Jul 29, 2026, 9:32 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607292132
Version 1.3 Jul 29, 2026, 12:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290029
Version 1.2 Jul 28, 2026, 3:13 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 8.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-64368, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607280313
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011