The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313_rtc_probe() calls devm_request_irq()     with IRQF_SHARED and &pdev->dev as the cookie, but platform_set_drvdata() is only called later after the     clock setup. With a shared IRQ line, another device on the same line can trigger the handler in that     window. The handler does dev_get_drvdata() on the cookie, gets NULL, and dereferences priv->rtc_base in     interrupt context. Pass priv as the cookie directly so the handler reads it from dev_id without the     lookup, removing the dependency on probe order. (CVE-2026-72424)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
365463	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8889-1)	Nessus	Ubuntu Local Security Checks	10/13/2026	10/13/2026	medium
337784	Linux Distros Unpatched Vulnerability : CVE-2026-72424	Nessus	Misc.	8/18/2026	10/10/2026	medium
365768	Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/23/2026	high
365525	Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8918-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium
365767	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8887-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium
365522	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8917-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

high

medium

medium

medium