The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2_init_notify() used mixer->urb,     which snd_usb_mixer_status_create() allocates for the UAC2 status interrupt endpoint and mixer.c manages.
    On a device with that endpoint, the already in use check fires on the status URB and returns 0 for     success without doing anything. No notification URB is submitted, and cmd_done is left zeroed because it     is initialised past that check and nowhere else. scarlett2_usb_init() then issues SCARLETT2_USB_INIT_1 and     wait_for_completion_timeout() would crash adding to the zeroed wait.head. Use a separate URB in     scarlett2_data, as done for FCP, and initialise cmd_done in scarlett2_init_private(). mixer.c was also     freeing the URB in snd_usb_mixer_free() and resubmitting it in snd_usb_mixer_activate(), so scarlett2 must     now do both: add scarlett2_cleanup_urb(), called from private_free and private_suspend, and a     private_resume callback to re-establish the URB after resume. scarlett2_init_notify() is reached from     there, and the URB kill path in scarlett2_notify() completes cmd_done, leaving a stale count that would     satisfy the next command's wait before the device ACKs. Use reinit_completion() to clear it. Also free the     URB if the transfer buffer allocation fails, and both if usb_submit_urb() fails. Move     scarlett2_init_notify() up next to scarlett2_cleanup_urb() so scarlett2_init_private() can reference it     without a forward declaration. (CVE-2026-80815)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80815

medium Nessus Plugin ID 343452

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.6 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.5 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.4 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.3 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSSv2 severity (based on CVE-2026-80815, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.2 Sep 8, 2026, 12:57 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609080057
Version 1.1 Sep 7, 2026, 2:57 PM New Plugin Feed: 202609071457