The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: macb: destroy the phylink instance on the probe error path macb_mii_init() creates a phylink instance     on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing     macb_alloc_tieoff() or register_netdev() leaks the instance. Destroy it at err_out_unregister_mdio, which     is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there. (CVE-2026-97973)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	9/29/2026	9/29/2026	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	10/4/2026	10/4/2026	high
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	10/8/2026	10/8/2026	high
350449	Linux Distros Unpatched Vulnerability : CVE-2026-97973	Nessus	Misc.	9/25/2026	10/2/2026	medium
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	10/17/2026	10/17/2026	high

Detections

Analytics

Plugins Search

high

high

high

medium

high