The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nvdimm/bus: Fix potential use after free in asynchronous initialization Dingisoul with KASAN reports a use     after free if device_add() fails in nd_async_device_register(). Commit b6eae0f61db2 (libnvdimm: Hold     reference on parent while scheduling async init) correctly added a reference on the parent device to be     held until asynchronous initialization was complete. However, if device_add() results in an allocation     failure the ref count of the device drops to 0 prior to the parent pointer being accessed. Thus resulting     in use after free. The bug bot AI correctly identified the fix. Save a reference to the parent pointer to     be used to drop the parent reference regardless of the outcome of device_add(). (CVE-2026-31399)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
304933	Linux Distros Unpatched Vulnerability : CVE-2026-31399	Nessus	Misc.	4/5/2026	4/8/2026	high
310098	Photon OS 4.0: Linux PHSA-2026-4.0-1002	Nessus	PhotonOS Local Security Checks	4/24/2026	4/27/2026	high
306005	Photon OS 5.0: Linux PHSA-2026-5.0-0813	Nessus	PhotonOS Local Security Checks	4/11/2026	4/27/2026	high

Detections

Analytics

Plugins Search

high

high

high