The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - can: bcm: add missing device refcount for CAN filter removal sashiko-bot remarked a problem with a     concurrent device unregistration in isotp.c which also is present in the bcm.c code. A former fix for     raw.c commit c275a176e4b6 (can: raw: add missing refcount for memory leak fix) introduced a     netdevice_tracker which solves the issue for bcm.c too. bcm_release(), bcm_delete_rx_op() and     bcm_notifier() relied on dev_get_by_index(ifindex) to re-find the device for an rx_op before unregistering     its filter. If a concurrent NETDEV_UNREGISTER has already unlisted the device from the ifindex table, that     lookup fails and can_rx_unregister() is silently skipped, leaving a stale CAN filter pointing at the soon-     to-be-freed bcm_op/socket. Hold a netdev_hold()/netdev_put() tracked reference on op->rx_reg_dev from the     moment the rx filter is registered in bcm_rx_setup() until it is unregistered in bcm_rx_unreg(), and use     that reference directly in bcm_release() and bcm_delete_rx_op() instead of re-looking the device up by     ifindex. (CVE-2026-72113)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72113

high Nessus Plugin ID 335564

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Sep 3, 2026, 1:08 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202609031308
Version 1.7 Sep 2, 2026, 6:07 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.6 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608281216
Version 1.5 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.4 Aug 21, 2026, 11:26 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608212326
Version 1.3 Aug 21, 2026, 7:41 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.2 Aug 18, 2026, 3:38 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-72113, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608181538
Version 1.1 Aug 15, 2026, 5:20 PM New Plugin Feed: 202608151720