The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - block: skip sync_blockdev() on surprise removal in bdev_mark_dead() bdev_mark_dead()'s @surprise == true     means the device is already gone. The filesystem callback fs_bdev_mark_dead() honours this and skips     sync_filesystem(), but the bare block device path (no ->mark_dead op) lost its !surprise guard when the     holder ->mark_dead callback was wired up (see Fixes), and now calls sync_blockdev() unconditionally, which     can hang forever waiting on writeback that can no longer complete. syzkaller hit this via     nvme_reset_work()'s I/O queues lost path: nvme_mark_namespaces_dead() -> blk_mark_disk_dead() ->     bdev_mark_dead(bdev, true) -> sync_blockdev() blocks in folio_wait_writeback(), wedging the reset worker     and every task waiting on it. Skip the sync on surprise removal, matching fs_bdev_mark_dead();
    invalidate_bdev() still runs. Orderly removal (surprise == false) is unchanged. Found by     FuzzNvme(Syzkaller with FEMU fuzzing framework). (CVE-2026-64326)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64326

high Nessus Plugin ID 329961

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.5 Aug 8, 2026, 1:29 PM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608081329
Version 1.4 Aug 7, 2026, 9:55 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608072155
Version 1.3 Jul 29, 2026, 12:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290029
Version 1.2 Jul 28, 2026, 1:30 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-64326, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607281330
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011