The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common When VIDIOC_TRY_FMT is called with an     unsupported pixel format on the OUTPUT queue, vdec_try_fmt_common() falls back to V4L2_PIX_FMT_MPEG2.
    However, if a distro has locally patched MPEG2 support out (as it has been broken for some time) the     platform format table does not contain MPEG2 so find_format() returns NULL and the subsequent dereference     of fmt_out->max_width triggers a NULL pointer dereference. Fix this by falling back to the first format in     the platform's format array instead of hardcoding V4L2_PIX_FMT_MPEG2. This is always valid since every     platform defines at least one format. (CVE-2026-93236)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	9/29/2026	9/29/2026	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	10/4/2026	10/4/2026	high
350118	Linux Distros Unpatched Vulnerability : CVE-2026-93236	Nessus	Misc.	9/25/2026	10/17/2026	medium
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	10/17/2026	10/17/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high