The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Commit e057b9477232 (arm64: syscall:
    Ensure saved x0 is kept in-sync with tracer updates) attempted to resolve a long-standing issue with     syscall entry tracing, where a tracer is able to manipulate the first syscall argument without being     subjected to seccomp or audit checking. Unfortunately, that fix was incomplete [1], as it failed to update     'orig_x0' between a tracer updating x0 during a seccomp ptrace exit (SECCOMP_RET_TRACE) and the seccomp     filter being re-evaluated. Rather than add hooks to the core seccomp code, instead move the     synchronisation code into the ptrace GPR and syscall setting code so that 'orig_x0' is kept up to date     with x0 whenever we're stopped on the syscall entry path. (CVE-2026-90347)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
347799	Linux Distros Unpatched Vulnerability : CVE-2026-90347	Nessus	Misc.	9/18/2026	11/6/2026	high
345814	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2143)	Nessus	Amazon Linux Local Security Checks	9/14/2026	9/25/2026	medium
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high
341859	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-130)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/25/2026	high

Detections

Analytics

Plugins Search

high

medium

high

high