The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual key buffer size     and token length fields in all the cca_check_sec*token() functions. Additionally check in     cca_gencipherkey() for possible underflow with returned key size. The CCA token structures contain user-     controlled len fields that were used in operations without proper validation against both the actual     buffer size and minimum token structure size. An attacker could set this field larger than the actual     buffer size, leading to reading beyond buffer boundaries. This may result in a kernel crash or exposure of     memory via sending this as part of a request down to the crypto card. Also an attacker could have used a     very small len value and thus enforce a buffer under-run which may produce similar effects as a over-read.
    So now a key must - key buf length must be at least sizeof the token struct - the key len field inside the     token must fit into the range of sizeof key token struct ... key buf length (CVE-2026-68453)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-68453

high Nessus Plugin ID 335232

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Sep 3, 2026, 1:08 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202609031308
Version 1.12 Sep 2, 2026, 6:07 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.11 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202608281216
Version 1.10 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.9 Aug 21, 2026, 11:26 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202608212326
Version 1.8 Aug 21, 2026, 7:41 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.7 Aug 17, 2026, 11:03 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202608171103
Version 1.6 Aug 16, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608161404
Version 1.5 Aug 15, 2026, 1:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608150104
Version 1.4 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.3 Aug 14, 2026, 12:08 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141208
Version 1.2 Aug 14, 2026, 7:05 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C") Plugin Feed: 202608140705
Version 1.1 Aug 14, 2026, 1:45 AM New Plugin Feed: 202608140145