The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require     exactly one Stream ID for a vDEVICE arm_vsmmu_vsid_to_sid() maps a guest's vSID to a single physical     Stream ID taken from master->streams[0], assuming a device has exactly one stream. A device with several     streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and     IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds. Add an     arm_vsmmu_vdevice_init() op to reject the vDEVICE with -EOPNOTSUPP when master->num_streams is not one,     rather than mapping it silently. (CVE-2026-74573)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
335801	Linux Distros Unpatched Vulnerability : CVE-2026-74573	Nessus	Misc.	8/15/2026	11/5/2026	critical
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

critical

high