The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 It is entirely possible for a guest to write to the     ZCR_EL2 sysreg alias while in a nested context, as it is expected if FEAT_NV2 is advertised to the L1     hypervisor. Get rid of the bogus WARN which, since the hyp vectors were installed at this point, has the     effect of a hyp_panic... (CVE-2026-72280)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72280

high Nessus Plugin ID 337447

Version 1.2

Version 1.2

Version 1.2 Aug 19, 2026, 6:09 AM Detection (updated detection logic) New Plugin metadata Plugin Feed: 202608190609
Version 1.2 Aug 19, 2026, 11:27 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Plugin Feed: 202608191127