The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports     with pp = &p->next in its fast-leave path. After br_multicast_del_pg() removes p, continuing the loop     advances pp through the deleted entry. If multicast-to-unicast was enabled, the bridge can hold multiple     port groups for the same port and group with different source MAC addresses. Once multicast-to-unicast is     disabled, br_port_group_equal() matches those entries by port only. A fast leave can then delete one entry     and continue from its stale next pointer, leaving mp->ports pointing at a deleted port group. Fast leave     only needs to remove one matching port group. Break after br_multicast_del_pg() so the loop stops before     dereferencing the removed entry. (CVE-2026-74480)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74480

critical Nessus Plugin ID 335782

Version 1.16