The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The     ASYNC_EVENT_CMPL_EVENT_ID_DBG_BUF_PRODUCER handler in bnxt_async_event_process() uses a firmware-supplied     'type' field directly as an index into bp->bs_trace[] without bounds validation. The 'type' field is a     16-bit value extracted from DMA-mapped completion ring memory that the NIC writes directly to host RAM. A     malicious or compromised NIC can supply any value from 0 to 65535, causing an out-of-bounds access into     kernel heap memory. The bnxt_bs_trace_check_wrap() call then dereferences bs_trace->magic_byte and writes     to bs_trace->last_offset and bs_trace->wrapped, leading to kernel memory corruption or a crash. Fix by     adding a bounds check and defining BNXT_TRACE_MAX as DBG_LOG_BUFFER_FLUSH_REQ_TYPE_ERR_QPC_TRACE + 1 to     cover all currently defined firmware trace types (0x0 through 0xc). (CVE-2026-31395)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
318102	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20826-1)	Nessus	SuSE Local Security Checks	6/1/2026	9/18/2026	high
324048	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:2238-1)	Nessus	SuSE Local Security Checks	7/1/2026	9/29/2026	high
304918	Linux Distros Unpatched Vulnerability : CVE-2026-31395	Nessus	Misc.	4/5/2026	7/31/2026	high
318240	SUSE SLES16 Security Update : kernel (SUSE-SU-2026:21860-1)	Nessus	SuSE Local Security Checks	6/2/2026	9/18/2026	high
319659	SUSE SLES16 Security Update : kernel (SUSE-SU-2026:21845-1)	Nessus	SuSE Local Security Checks	6/8/2026	8/26/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high