There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request
    context when cloning ACOMP_REQUEST_ON_STACK() reserves only enough storage for the synchronous fallback.
    When an async implementation is selected, callers clone that stack request before retrying, but
    acomp_request_clone() currently copies only the stack-sized object. The clone therefore has no storage for
    the async provider request context, and providers such as QAT write past the allocation through
    acomp_request_ctx(). KASAN does report a slab OOB write. Allocate a zeroed clone large enough for the
    runtime acomp request size, copy only the bytes present in the source object, and preserve the existing
    fallback-on-allocation-failure behavior. Use the runtime reqsize because an implementation may adjust it
    during tfm initialization. (CVE-2026-90069)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request     context when cloning ACOMP_REQUEST_ON_STACK() reserves only enough storage for the synchronous fallback.
    When an async implementation is selected, callers clone that stack request before retrying, but     acomp_request_clone() currently copies only the stack-sized object. The clone therefore has no storage for     the async provider request context, and providers such as QAT write past the allocation through     acomp_request_ctx(). KASAN does report a slab OOB write. Allocate a zeroed clone large enough for the     runtime acomp request size, copy only the bytes present in the source object, and preserve the existing     fallback-on-allocation-failure behavior. Use the runtime reqsize because an implementation may adjust it     during tfm initialization. (CVE-2026-90069)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
475712	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Cloud Security	Google COS Security Checks	10/16/2026	10/16/2026	high
475712	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	10/16/2026	10/16/2026	high
347591	Linux Distros Unpatched Vulnerability : CVE-2026-90069	Nessus	Misc.	9/18/2026	11/13/2026	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

high

high

high

high