The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on     Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in     internal/cri/server/container_execsync.go when CRI ExecSync is used by exec probes or lifecycle hooks that     launch long-lived background child processes retaining standard input and output pipes. The input and     output drain phase has no default timeout and did not stop when the request context was canceled, so     repeated ExecSync invocations can accumulate blocked goroutines and host memory. The resulting resource     exhaustion can cause the OOM killer to terminate containerd, leaving the container runtime unavailable     until restart. Deployments not using containerd's CRI implementation and containers not running on Linux     are not affected. This issue is fixed in versions 1.7.35, 2.0.12, 2.2.8, and 2.3.5. (CVE-2026-53495)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53495

medium Nessus Plugin ID 345883

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Oct 10, 2026, 2:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610101417
Version 1.2 Sep 16, 2026, 5:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609160533
Version 1.1 Sep 15, 2026, 6:55 PM New Plugin Feed: 202609151855