The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iommu/vt-d: Fix race condition during PASID entry replacement The Intel VT-d PASID table entry is 512 bits     (64 bytes). When replacing an active PASID entry (e.g., during domain replacement), the current     implementation calculates a new entry on the stack and copies it to the table using a single structure     assignment. struct pasid_entry *pte, new_pte; pte = intel_pasid_get_entry(dev, pasid);
    pasid_pte_config_first_level(iommu, &new_pte, ...); *pte = new_pte; Because the hardware may fetch the     512-bit PASID entry in multiple 128-bit chunks, updating the entire entry while it is active (Present bit     set) risks a torn read. In this scenario, the IOMMU hardware could observe an inconsistent state     partially new data and partially old data  leading to unpredictable behavior or spurious faults. Fix this     by removing the unsafe replace helpers and following the clear-then-update flow, which ensures the     Present bit is cleared and the required invalidation handshake is completed before the new configuration     is applied. (CVE-2026-45945)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
317315	Linux Distros Unpatched Vulnerability : CVE-2026-45945	Nessus	Misc.	5/28/2026	8/27/2026	high
337207	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2045)	Nessus	Amazon Linux Local Security Checks	8/18/2026	9/7/2026	high

Detections

Analytics

Plugins Search

high

high