The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() The `ims_pcu_process_data()` processes     incoming URB data byte by byte. However, it fails to check if the `read_pos` index exceeds     IMS_PCU_BUF_SIZE. If a malicious USB device sends a packet larger than IMS_PCU_BUF_SIZE, `read_pos` will     increment indefinitely. Moreover, since `read_pos` is located immediately after `read_buf`, the attacker     can overwrite `read_pos` itself to arbitrarily control the index. This manipulated `read_pos` is     subsequently used in `ims_pcu_handle_response()` to copy data into `cmd_buf`, leading to a heap buffer     overflow. Specifically, an attacker can overwrite the `cmd_done.wait.head` located at offset 136 relative     to `cmd_buf` in the `ims_pcu_handle_response()`. Consequently, when the driver calls     `complete(&pcu->cmd_done)`, it triggers a control flow hijack by using the manipulated pointer. Fix this     by adding a bounds check for `read_pos` before writing to `read_buf`. If the packet is too long, discard     it, log a warning, and reset the parser state. [dtor: factor out resetting packet state, reset checksum as     well] (CVE-2026-64565)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64565

critical Nessus Plugin ID 331891

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Sep 9, 2026, 2:39 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSSv2 severity (based on CVE-2026-64565, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090239
Version 1.7 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.6 Aug 28, 2026, 2:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.5 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.4 Aug 14, 2026, 5:17 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.3 Aug 7, 2026, 7:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608070732
Version 1.2 Aug 5, 2026, 2:10 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608051410
Version 1.1 Aug 4, 2026, 9:07 PM New Plugin Feed: 202608042107