The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/srpt: fix integer overflow in immediate data length check imm_buf->len is a user-controlled uint32_t     received from the network. Adding it to imm_data_offset without overflow checking allows a malicious     initiator to send len=0xFFFFFFFF, causing req_size to wrap around to a small value, bypassing the bounds     check, and subsequently passing a ~4GB length to sg_init_one(). Use check_add_overflow() to detect     wrapping before the comparison. (CVE-2026-74394)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74394

critical Nessus Plugin ID 337549

Version 1.2