The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - serial: 8250_dma: Clear stale RX state on shutdown serial8250_release_dma() terminates RX DMA and releases     the channel, but leaves rx_running set. If the port is closed while an RX transfer is active, the stale     state remains while rxchan is NULL until the channel is requested again on the next open. The DesignWare     BUSY workaround added by commit a7b9ce39fbe4 (serial: 8250_dw: Ensure BUSY is deasserted) calls     serial8250_rx_dma_flush() from the LCR write path during startup. This happens before     serial8250_request_dma() obtains a new RX channel. On reopen, the stale rx_running state therefore makes     the flush path pass a NULL channel to dmaengine_pause(), causing a kernel Oops. Clear rx_running after     terminating RX DMA, matching the TX cleanup. Also make the flush helper return if the DMA object or RX     channel is not available so startup and teardown paths cannot pass a NULL channel to the DMAengine API.
    (CVE-2026-74654)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74654

medium Nessus Plugin ID 338933

Version 1.18

Version 1.17

Version 1.16

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.18 Nov 13, 2026, 4:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611131653
Version 1.17 Nov 12, 2026, 12:23 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120023
Version 1.16 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.15 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.14 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.13 Oct 23, 2026, 11:36 AM Detection (updated detection logic) Plugin Feed: 202610231136
Version 1.12 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin Feed: 202610220002
Version 1.11 Oct 10, 2026, 5:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610100524
Version 1.9 Oct 7, 2026, 12:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070045
Version 1.8 Sep 9, 2026, 2:39 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090239
Version 1.7 Sep 3, 2026, 6:34 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609031834
Version 1.6 Sep 3, 2026, 1:08 PM Detection (updated detection logic) Plugin Feed: 202609031308
Version 1.5 Sep 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.4 Aug 31, 2026, 10:57 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 26, 2026, 1:14 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608261314
Version 1.2 Aug 25, 2026, 9:17 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-74654, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608252117
Version 1.1 Aug 23, 2026, 3:52 AM New Plugin Feed: 202608230352