The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - accel/ivpu: Limit firmware log name prints to field size The name in struct vpu_tracing_buffer_header is a     fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the     host side enforces this, so printing it with an unbounded string conversion would read past the field if     the terminator is ever missing and expose adjacent bytes of the shared tracing BO through dmesg and the     debugfs FW log output. Print at most as many characters as the name field holds, so the output never runs     past it even if the string is not NUL-terminated. (CVE-2026-97915)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97915

medium Nessus Plugin ID 350550

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.5 Oct 2, 2026, 6:07 PM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N") CVSSv2 severity (based on CVE-2026-97915, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021807
Version 1.4 Oct 1, 2026, 9:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610012159
Version 1.2 Sep 30, 2026, 6:31 AM CVSS metrics ("CVSSv2 score" set to 1.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:P/I:N/A:N") CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230