The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Input: evdev - sanitize event type index when fetching event masks The user-supplied event type index     passed to EVIOCGMASK / EVIOCSMASK ioctls is used to index the static counts array in evdev_get_mask_cnt()     and client evmasks array in evdev_get_mask(). While the event type is architecturally bounded by EV_CNT,     speculative execution may mispredict bounds checks and perform out-of-bounds loads. Sanitize the event     type index in evdev_get_mask_cnt() branchlessly using array_index_mask_nospec(). This clamps the index to     0 for safe array access and forces the returned count to 0 speculatively when the index is out of bounds.
    We do not need additional array_index_nospec() calls in evdev_get_mask() because evdev_get_mask_cnt()     speculatively forces the count (and resulting xfer_size) to 0 for out-of-bounds types, preventing any     speculative memory access to client evmasks array. (CVE-2026-74683)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74683

high Nessus Plugin ID 338885

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Sep 9, 2026, 2:39 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-74683, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090239
Version 1.6 Sep 3, 2026, 6:34 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609031834
Version 1.5 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.4 Aug 31, 2026, 10:57 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-74683, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 26, 2026, 1:14 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608261314
Version 1.2 Aug 24, 2026, 3:52 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608241552
Version 1.1 Aug 23, 2026, 3:52 AM New Plugin Feed: 202608230352