The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for     the kexec command line marker, the kexec_load(2) path (file_mode == 0) passes the user-space segment     buffer straight to strncmp() through a bogus (char __user *) cast. This dereferences a user pointer in     kernel context, which is wrong and is flagged by sparse: arch/loongarch/kernel/machine_kexec.c:84:51:
    sparse: incorrect type in argument 2 (different address spaces) @@ expected char const * @@ got char     [noderef] __user * Here copy the marker-sized prefix of each segment into a small on-stack buffer with     copy_from_user() before comparing, and skip segments that fault. The subsequent copy_from_user() that     stages the full command line into the safe area is left unchanged. (CVE-2026-68435)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-68435

high Nessus Plugin ID 334883

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Aug 19, 2026, 6:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608190609
Version 1.5 Aug 15, 2026, 1:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608150104
Version 1.4 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.3 Aug 14, 2026, 7:05 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608140705
Version 1.2 Aug 13, 2026, 12:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608130031
Version 1.1 Aug 12, 2026, 7:14 PM New Plugin Feed: 202608121914