The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix NULL pointer     deref in eth_get_drvinfo Commit ec35c1969650 (usb: gadget: f_ncm: Fix net_device lifecycle with     device_move) reparents the gadget device to /sys/devices/virtual during unbind, clearing the gadget     pointer. If the userspace tool queries on the surviving interface during this detached window, this leads     to a NULL pointer dereference. Unable to handle kernel NULL pointer dereference Call trace:
    eth_get_drvinfo+0x50/0x90 ethtool_get_drvinfo+0x5c/0x1f0 __dev_ethtool+0xaec/0x1fe0     dev_ethtool+0x134/0x2e0 dev_ioctl+0x338/0x560 Add a NULL check for dev->gadget in eth_get_drvinfo(). When     detached, skip copying the fw_version and bus_info strings, which is natively handled by     ethtool_get_drvinfo for empty strings. (CVE-2026-31727)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	7/23/2026	7/23/2026	medium
311720	Linux Distros Unpatched Vulnerability : CVE-2026-31727	Nessus	Misc.	5/2/2026	7/18/2026	medium
318365	Photon OS 5.0: Linux PHSA-2026-5.0-0849	Nessus	PhotonOS Local Security Checks	6/3/2026	7/31/2026	high

Detections

Analytics

Plugins Search

medium

medium

high