The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: usb: aqc111: Do not perform PM inside suspend callback syzbot reports task hung in rpm_resume This     is caused by aqc111_suspend calling the PM variant of its write_cmd routine. The simplified call trace     looks like this: rpm_suspend() usb_suspend_both() - here udev->dev.power.runtime_status == RPM_SUSPENDING     aqc111_suspend() - called for the usb device interface aqc111_write32_cmd() usb_autopm_get_interface()     pm_runtime_resume_and_get() rpm_resume() - here we call rpm_resume() on our parent rpm_resume() - Here we     wait for a status change that will never happen. At this point we block another task which holds rtnl_lock     and locks up the whole networking stack. Fix this by replacing the write_cmd calls with their _nopm     variants (CVE-2026-23446)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
304960	Linux Distros Unpatched Vulnerability : CVE-2026-23446	Nessus	Misc.	4/5/2026	4/8/2026	medium
306005	Photon OS 5.0: Linux PHSA-2026-5.0-0813	Nessus	PhotonOS Local Security Checks	4/11/2026	4/11/2026	high

Detections

Analytics

Plugins Search

medium

high