The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bnxt_en: Don't free the live ring's TPA state on queue restart failure bnxt_queue_mem_alloc() shallow     copies the live RX ring into the clone: memcpy(clone, rxr, sizeof(*rxr)); the code currently clears     pointers that the clone owns (such as rx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at     memory of the live ring that was cloned. If an allocation failure happens later and the err_free_tpa_info     label is taken, the live ring's memory can be freed while still in use. Fix this by initializing the     clone's pointers to NULL to prevent live ring state from being freed inadvertently. (CVE-2026-97574)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97574

high Nessus Plugin ID 350480

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.5 Oct 17, 2026, 4:43 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610170443
Version 1.4 Oct 2, 2026, 1:05 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202610021305
Version 1.2 Sep 29, 2026, 4:08 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-97574, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609291608
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230