The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/rtrs-srv: Fix integer underflow in process_read and process_write usr_len is read from a network-     supplied message field (le16_to_cpu) and used to compute data_len = off - usr_len without validating that     usr_len <= off. A malicious RDMA client can send usr_len > off causing an integer underflow, resulting in     data_len wrapping to a huge size_t value which is then passed to the rdma_ev callback as a memory length,     leading to out-of-bounds memory access. Fix by reading and validating usr_len <= off before     rtrs_srv_get_ops_ids() in both process_read() and process_write(), ensuring the early return path acquires     no reference and has no resource leak. (CVE-2026-97413)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	9/29/2026	9/29/2026	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	10/4/2026	10/4/2026	high
366742	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)	Nessus	SuSE Local Security Checks	10/17/2026	10/17/2026	high
349981	Linux Distros Unpatched Vulnerability : CVE-2026-97413	Nessus	Misc.	9/24/2026	10/5/2026	critical

Detections

Analytics

Plugins Search

high

high

high

critical