The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires an old entry when     the table has a non-zero limit, has exactly reached that limit and has VHOST_IOTLB_FLAG_RETIRE set. Non-     retiring tables can keep allocating entries after reaching their configured limit. Existing vhost devices     allocate their IOTLB with max_iotlb_entries from vhost.c, which defaults to 2048 and is tunable by module     parameter. Use the caller-provided limit at the allocation point instead of adding a separate default in     the common IOTLB helper, and reject non-positive values in vhost paths that can report an error. Other     vhost IOTLB users should not create zero-limit tables when entries can be populated from userspace or     guest-controlled requests. Add caller-side max_iotlb_entries parameters for mlx5 vDPA, VDUSE and vhost-     vDPA. Reject non-positive VDUSE and vhost-vDPA values, and require at least two entries for vdpa_sim and     mlx5 vDPA paths that install full-range mappings, since those mappings are split into two IOTLB entries.
    Handle full-range mappings in the common helper by checking that the IOTLB can hold both split entries     before inserting the first half. This avoids returning an error after leaving a half mapping behind. When     the table is full, keep the existing retire behavior for retiring tables and return -ENOSPC for non-     retiring tables. Reuse the retired map node instead of freeing it and allocating a replacement, so a     stream of IOTLB updates cannot keep forcing GFP_ATOMIC allocations after the table has reached its limit.
    If a zero-limit IOTLB still reaches the common helper, treat it as a configuration error and return
    -EINVAL. I found this bug myself, though the patch was written with AI assistance. (CVE-2026-74713)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74713

high Nessus Plugin ID 338996

Version 1.13

Version 1.12

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Nov 6, 2026, 7:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611060731
Version 1.12 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.10 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.9 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.8 Oct 7, 2026, 6:12 AM Detection (updated detection logic) Plugin Feed: 202610070612
Version 1.7 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin Feed: 202609231321
Version 1.6 Sep 3, 2026, 1:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609031308
Version 1.5 Sep 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.4 Aug 31, 2026, 10:57 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 26, 2026, 1:14 PM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202608261314
Version 1.2 Aug 25, 2026, 10:44 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-74713, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608251044
Version 1.1 Aug 23, 2026, 3:52 AM New Plugin Feed: 202608230352