The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - keys: fix out-of-bounds read in keyring_get_key_chunk() For description-level chunks     keyring_get_key_chunk() advances the read pointer by level * sizeof(long) past the inline prefix but only     bounds-checks the prefix, so a long enough key description is read past its kmemdup(desc, desc_len + 1)     allocation. Compute the full byte offset and bounds-check the description against it before reading. The     walk only reaches a description-level chunk when two keys collide through the hash, x, type and domain_tag     chunks, so this is reached from an unprivileged add_key(2) with a crafted pair of same-type keys whose     index hashes collide; KASAN reports a slab-out-of-bounds read. (CVE-2026-74567)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74567

high Nessus Plugin ID 335765

Version 1.5