The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: mac80211: fix fils_discovery double free on alloc failure ieee80211_set_fils_discovery() calls     kfree_rcu() on the old template before allocating the replacement. If the kzalloc() then fails, it returns
    -ENOMEM while link->u.ap.fils_discovery still points at the object already queued for freeing. A later     update or AP teardown (ieee80211_stop_ap()) re-queues that same rcu_head; the second free is caught by     KASAN when the RCU sheaf is processed in softirq: BUG: KASAN: double-free in rcu_free_sheaf     (mm/slub.c:5850) Free of addr ffff88800c065280 by task swapper/0/0 ... __rcu_free_sheaf_prepare     (mm/slub.c:2634 mm/slub.c:2940) rcu_free_sheaf (mm/slub.c:5850) rcu_core (kernel/rcu/tree.c:2617     kernel/rcu/tree.c:2869) handle_softirqs (kernel/softirq.c:622) The buggy address belongs to the cache     kmalloc-96 of size 96 Queue the old object for kfree_rcu() only after the new one is published, matching     ieee80211_set_probe_resp() and ieee80211_set_s1g_short_beacon(). (CVE-2026-64570)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64570

high Nessus Plugin ID 332773

Version 1.3

Version 1.2

Version 1.3 Aug 7, 2026, 1:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608070131
Version 1.2 Aug 6, 2026, 3:43 PM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 score" set to 7.8. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) New Plugin metadata Plugin Feed: 202608061543