The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx     Devmem tcp tx doesn't work without zero-copy, however it's not currently enforced if NETIF_F_SG isn't     present. In this case, tcp_sendmsg_locked() will try the copy path and try to copy data from an iovec     which consists of offsets into the dma-buf and would normally fail. Moreover, d9c56501c72fd (net: tcp:
    block mixing readable and unreadable frags) relies on that and assumes that the devmem binding is present     IFF we're using the zero-copy path, which can be used to mix net-iov and pages in a single skb, and break     invariants. Let's reject devmem tx without zero-copy. Note, the parameter check the patch is modifying is     too loose, we can create an io_uring request with dmabuf_id and all ZC flags, but which won't have the     binding. We replace it with stricter validation. (CVE-2026-90051)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-90051

high Nessus Plugin ID 347458

Version 1.12