The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in     initialize_timer() A userspace-driven ALSA timer (SND_UTIMER) lets an unprivileged user set the backing     snd_timer's hardware resolution to an arbitrary 64-bit value via SNDRV_TIMER_IOCTL_CREATE.
    snd_utimer_create() only rejects zero. When such a timer is bound to a sequencer queue, initialize_timer()     computes the tick period as tmr->ticks = 1000000000 / (r * freq); where r is that user-controlled     resolution and freq is the sequencer update rate in Hz, clamped to MIN_FREQUENCY..MAX_FREQUENCY     (10..6250). A resolution of 2^63 makes the 64-bit product r * freq wrap to zero for any even freq,     including DEFAULT_FREQUENCY (1000), so the division faults with a divide-by-zero. The division runs under     tmr->lock with interrupts disabled, so the oops leaves the spinlock held and hangs the CPU. It is     reachable by an unprivileged user with access to /dev/snd/timer and /dev/snd/seq. Oops: divide error: 0000     [#1] SMP KASAN PTI CPU: 7 UID: 1000 PID: 456 Comm: alsa_seq_utimer Not tainted 7.2.0-rc4+ RIP:
    0010:initialize_timer.constprop.0+0x20a/0x2d0 snd_seq_timer_start+0x15e/0x2b0     snd_seq_control_queue+0x56f/0xba0 snd_seq_write+0x3e0/0x730 Reject an overflowing product with     check_mul_overflow() and fall back to a single tick, which also avoids feeding a wrapped-but-nonzero     divisor (e.g. 2^63 * 1000 mod 2^64 == 0, or other resolutions wrapping to a small value) into the period     computation. (CVE-2026-74504)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74504

medium Nessus Plugin ID 335776

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.13 Nov 12, 2026, 12:23 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120023
Version 1.12 Nov 6, 2026, 7:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611060731
Version 1.11 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.10 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.9 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin Feed: 202610180528
Version 1.8 Aug 28, 2026, 2:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.7 Aug 26, 2026, 1:14 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608261314
Version 1.6 Aug 21, 2026, 5:59 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202608211759
Version 1.5 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.4 Aug 19, 2026, 6:09 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608190609
Version 1.2 Aug 16, 2026, 2:04 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-74504, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608161404
Version 1.1 Aug 15, 2026, 10:21 PM New Plugin Feed: 202608152221