The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with     promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM     rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the     mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and     rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing     down its interface cannot inadvertently clear the PF's MCAM rules. (CVE-2026-72312)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72312

high Nessus Plugin ID 337477

Version 1.2