The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak     on the init-failure path tegra241_cmdqv_init_structures() allocates VINTF0 with kzalloc_obj(), inits it,     and preallocates its logical VCMDQs. Two of its error paths leak. When tegra241_cmdqv_init_vintf() fails     it returns before VINTF0 reaches the cmdqv->vintfs[] array, so the devres unwind on probe failure cannot     reach it; free it directly there. A later VCMDQ preallocation failure instead leaves VINTF0 published, and     so this time the unwind does reach tegra241_cmdqv_remove_vintf(), which then frees it from vintf->hyp_own.
    But tegra241_vintf_hw_init() sets that flag only afterward, from a HW read-back, so the still-uninited     VINTF0 reads as guest-owned and leaks, with mutex_destroy() and ida_destroy() run on fields it never set     up. Decide ownership from vintf->idx instead, the index assigned when its id is allocated: idx 0 is the     kernel-owned VINTF0, while idx >= 1 marks a guest VINTF. So the in-kernel free decision in     tegra241_cmdqv_remove_vintf() and tegra241_vintf_free_lvcmdq() now keys on idx too, and hyp_own stays a     pure HW-readback state. (CVE-2026-90424)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
377900	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)	Nessus	Amazon Linux Local Security Checks	11/9/2026	11/9/2026	high
347807	Linux Distros Unpatched Vulnerability : CVE-2026-90424	Nessus	Misc.	9/18/2026	11/7/2026	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high
365258	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)	Nessus	Amazon Linux Local Security Checks	10/12/2026	10/29/2026	high

Detections

Analytics

Plugins Search

high

high

high

high