The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() l2cap_sock_new_connection_cb()     returned l2cap_pi(sk)->chan after release_sock(parent). Once the parent lock is dropped the newly enqueued     child socket sk is reachable via the accept queue, so another task can accept and free it before the     callback dereferences sk, resulting in a use-after-free. Rework the ->new_connection() op so the core,     rather than the callback, owns the child channel's lifetime. The op now receives a pre-allocated new_chan     and returns an errno instead of allocating and returning a channel. l2cap_new_connection() allocates the     child channel and links it into the conn list via __l2cap_chan_add() before invoking the callback, so the     conn-list reference keeps the channel alive once release_sock(parent) exposes the socket to other tasks.
    Channel configuration that was duplicated in l2cap_sock_init() and the various new_connection callbacks is     consolidated into l2cap_chan_set_defaults(), which now inherits from the parent channel when one is     supplied. (CVE-2026-64557)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64557

high Nessus Plugin ID 330641

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Aug 14, 2026, 5:17 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-64557, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.7 Aug 11, 2026, 10:23 AM CVSS metrics ("CVSSv2 score" set to 8.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-64557, severity increased from "Medium" to "High") Plugin Feed: 202608111023
Version 1.6 Aug 7, 2026, 5:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608071710
Version 1.5 Aug 6, 2026, 3:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608061543
Version 1.4 Aug 1, 2026, 2:26 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010226
Version 1.3 Jul 30, 2026, 10:03 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607302203
Version 1.2 Jul 30, 2026, 3:30 AM CVSS metrics ("CVSSv2 score" set to 6.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv2 score source (set to "CVE-2026-64557") CVSSv2 severity (based on CVE-2026-64557, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607300330
Version 1.1 Jul 29, 2026, 9:32 PM New Plugin Feed: 202607292132