The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: au1000: move free_irq out of the close-time spinlocked section au1000_close() calls free_irq() while     aup->lock is still held with spin_lock_irqsave(). free_irq() can sleep because it takes the IRQ descriptor     request mutex, so it does not belong inside the close-time spinlocked section. This was found by our     static analysis tool and then confirmed by manual review of the in-tree au1000_close() .ndo_stop path. The     reviewed path keeps aup->lock held across the MAC reset, queue stop and free_irq(dev->irq, dev). A     directed runtime validation kept that ndo_stop carrier and the same free_irq(dev->irq, dev) operation     under the driver lock. Lockdep reported BUG: sleeping function called from invalid context and Invalid     wait context while free_irq() was taking desc->request_mutex, with au1000_close() and free_irq() on the     stack. Drop aup->lock before freeing the IRQ. The protected close-time work still stops the device and     queue before IRQ teardown, but the sleepable IRQ core path now runs outside the spinlocked section.
    (CVE-2026-93815)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	9/29/2026	9/29/2026	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	10/4/2026	10/4/2026	high
350009	Linux Distros Unpatched Vulnerability : CVE-2026-93815	Nessus	Misc.	9/24/2026	9/30/2026	medium
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	10/17/2026	10/17/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high