The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - can: bcm: extend bcm_tx_lock usage for data and timer updates Stage new CAN frame content for an existing     tx op into a kmalloc()'d buffer and validate it there, mirroring the approach already used in     bcm_rx_setup(). Only copy the validated data into op->frames while holding op->bcm_tx_lock, so     bcm_can_tx() and bcm_tx_timeout_handler() can no longer observe a partially updated or unvalidated frame.
    Add a missing error path for memcpy_from_msg() when copying CAN frame data from userspace. Also move the     kt_ival1/kt_ival2/ival1/ival2 updates in bcm_tx_setup() under op->bcm_tx_lock, and read     kt_ival1/kt_ival2/count under the same lock in bcm_tx_set_expiry() and bcm_tx_timeout_handler(), closing     the torn 64-bit ktime_t read on 32-bit platforms. (CVE-2026-72119)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72119

high Nessus Plugin ID 335681

Version 1.9