The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: atlantic: free stranded TX buffers on ring deinit aq_vec_deinit() drains the TX rings with a single     aq_ring_tx_clean() call, which frees at most AQ_CFG_TX_CLEAN_BUDGET (256) descriptors and stops at     hw_head, which no longer moves once aq_vec_stop() has stopped the hardware and NAPI. Completed descriptors     beyond the budget and everything still posted in [hw_head, sw_tail) keep their skb or xdp_frame when the     interface goes down: aq_vec_ring_free() then frees the buffer ring and the references are lost for good.
    Today this is a silent memory leak on every interface down under TX/XDP_TX load. With the conversion of     the RX path to page_pool posted for net-next it becomes much more visible: XDP_TX frames carry fragment     references on the RX ring's page_pool, so a single stranded frame keeps the pool's inflight count above     zero forever. page_pool_destroy() then never completes, the pool is leaked together with its pages, and     page_pool_release_retry() stalled pool shutdown is warned every 60 seconds from that point on, on every     ifdown, XDP detach or ring resize under XDP_TX load. Bring back aq_ring_tx_deinit() as it was before the     removal and use it for teardown again, with one extension: TX rings can hold xdp_frames nowadays, so     release those too. They are returned with xdp_return_frame() since this runs in process context.
    (CVE-2026-74623)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74623

medium Nessus Plugin ID 338892

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Sep 9, 2026, 2:39 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090239
Version 1.7 Sep 4, 2026, 7:34 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202609040734
Version 1.6 Sep 3, 2026, 1:08 PM Detection (updated detection logic) Plugin Feed: 202609031308
Version 1.5 Sep 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.4 Aug 31, 2026, 10:57 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 26, 2026, 1:14 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608261314
Version 1.2 Aug 25, 2026, 5:40 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-74623, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608250540
Version 1.1 Aug 23, 2026, 3:52 AM New Plugin Feed: 202608230352