The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: btusb: validate Realtek vendor event length btusb_recv_event_realtek() reads the event code at     data[0] and the Realtek subevent code at data[2] before deciding whether to consume a vendor event as a     coredump. For example, the two-byte event ff 00 contains a complete vendor-event header declaring zero     parameters. The old classifier still reads a nonexistent third byte and can misclassify the event as a     coredump if the adjacent byte is 0x34. Require the HCI event header and first parameter to be present     before inspecting the Realtek subevent code. Short events continue through the normal HCI receive path,     which owns their protocol validation. (CVE-2026-68339)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-68339

medium Nessus Plugin ID 334810

Version 1.2

Version 1.1

Version 1.2 Aug 13, 2026, 5:24 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608130524
Version 1.1 Aug 12, 2026, 7:14 PM New Plugin Feed: 202608121914