The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling     perf_event_exit_event(). For top-level events, this removes the event from the context with DETACH_EXIT     only. This can leave inconsistent group state when a removed event is a group leader and the group     contains siblings without remove_on_exec. If the group was active, the surviving siblings can remain     active and attached to the removed leader's sibling list, but are no longer represented by a valid group     leader on the PMU context active lists. A later close of the removed leader uses DETACH_GROUP and can     promote the still-active siblings from this stale group state. The next schedule-in can then add an     already-linked active_list entry again, corrupting the PMU context active list. With DEBUG_LIST enabled,     this is caught as a list_add double-add in merge_sched_in(). Fix this by detaching group relationships     when remove_on_exec removes an event. This preserves the existing task-exit and revoke behavior, while     ensuring surviving siblings are ungrouped before the removed event leaves the context. (CVE-2026-64556)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64556

high Nessus Plugin ID 330652

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Aug 14, 2026, 5:17 PM CVSS metrics ("CVSSv2 score" set to 6.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.6 Aug 11, 2026, 10:23 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608111023
Version 1.5 Aug 7, 2026, 9:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608072155
Version 1.4 Aug 1, 2026, 2:26 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010226
Version 1.3 Jul 30, 2026, 10:03 PM CVSS metrics ("CVSSv2 score" set to 6.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607302203
Version 1.2 Jul 30, 2026, 3:30 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607300330
Version 1.1 Jul 29, 2026, 9:32 PM New Plugin Feed: 202607292132