The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Compare against -EDEADLK,     which is what ww_mutex_lock() actually returns and what every other deadlock check in this file already     uses. Function regulator_lock_two() acquires two regulators via regulator_lock_nested() ->     ww_mutex_lock(). On contention, ww_mutex_lock() returns -EDEADLK, which is the caller's signal to drop the     lock it holds and retry the acquisition in the canonical order. However, regulator_lock_two() tests the     return value against -EDEADLOCK rather than -EDEADLK. On most architectures, EDEADLK and EDEADLOCK are the     same value, so the comparison happens to be correct and the bug is invisible. But on MIPS, SPARC, and     PowerPC, those two errors have different values. The test is wrong: a genuine -EDEADLK backoff no longer     matches -EDEADLOCK, so instead of unlocking and retrying, the code falls into WARN_ON(ret) and returns     with only one of the two regulators locked. In practice, this is a bug only on MIPS, because the regulator     core is not built or used on the other two platforms. In general, EDEADLK is preferred over EDEADLOCK for     new code. (CVE-2026-72314)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72314

high Nessus Plugin ID 337503

Version 1.3

Version 1.1

Version 1.3 Aug 19, 2026, 11:27 AM CVSS metrics ("CVSSv2 score" set to 4.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C". "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608191127
Version 1.1 Aug 19, 2026, 6:09 AM New Plugin Feed: 202608190609