The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in     spacemit_pin_set_config spacemit_pin_set_config() looks up the per-pin descriptor with spacemit_get_pin()     then checks the wrong variable for failure: const struct spacemit_pin *spin = spacemit_get_pin(pctrl,     pin); ... if (!pin) return -EINVAL; reg = spacemit_pin_to_reg(pctrl, spin->pin); pin is an unsigned int     pin id, where 0 (GPIO_0 / gmac0_rxdv on K3) is a valid pin, so rejecting it here drops the PAD config     write for the first pin of every group. On K3 Pico-ITX the GMAC RGMII group lists pin 0 as its first     entry, so its drive-strength / bias configuration was silently ignored. The intended guard is against     spacemit_get_pin() returning NULL when the pin id isn't in the SoC's pin table. Check spin instead, which     both restores PAD setup for pin 0 and prevents a NULL deref on spin->pin. (CVE-2026-80648)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80648

medium Nessus Plugin ID 341697

Version 1.9

Version 1.7

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Oct 10, 2026, 5:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610100524
Version 1.7 Oct 9, 2026, 2:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
Version 1.5 Oct 7, 2026, 6:12 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202610070612
Version 1.4 Sep 4, 2026, 7:34 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609040734
Version 1.3 Sep 2, 2026, 12:19 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609020019
Version 1.2 Sep 1, 2026, 5:14 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv2 score source (set to "CVE-2026-80648") CVSSv2 severity (based on CVE-2026-80648, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609010514
Version 1.1 Aug 31, 2026, 4:25 PM New Plugin Feed: 202608311625