The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - l2tp: fix tunnel and session refcount leak on seq_file release In pppol2tp_proc_open() and     l2tp_dfs_seq_open(), iteration state (pd->tunnel and pd->session) is kept in seq_file private data to     allow iteration across multiple read() system calls. However, if userspace closes /proc/net/pppol2tp or     /sys/kernel/debug/l2tp/tunnels before reading to end-of-file (EOF), any tunnel or session reference stored     in pd->tunnel / pd->session is left un-dropped when seq_file private data is freed. Fix this by dropping     any remaining pd->tunnel and pd->session references in pppol2tp_proc_release() and l2tp_dfs_seq_release()     when closing the file. (CVE-2026-74735)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74735

medium Nessus Plugin ID 340792

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Sep 30, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.7 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin Feed: 202609231321
Version 1.6 Sep 4, 2026, 7:34 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609040734
Version 1.5 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.4 Sep 2, 2026, 12:19 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609020019
Version 1.3 Aug 31, 2026, 10:57 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.2 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N") CVSSv2 severity (based on CVE-2026-74735, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.1 Aug 27, 2026, 5:05 AM New Plugin Feed: 202608270505