The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: target: file: Use kzalloc_flex for aio_cmd The target_core_file doesn't initialize the aio_cmd->iocb     for the ki_write_stream. When a write command fd_execute_rw_aio() is executed, we may get a bogus     ki_write_stream value, causing unintended write failure status when checking iocb->ki_write_stream >     max_write_streams in the block device. Let's just use kzalloc_flex when allocating the aio_cmd and let     ki_write_stream=0 to fix this issue. (CVE-2026-43055)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
311617	Linux Distros Unpatched Vulnerability : CVE-2026-43055	Nessus	Misc.	5/2/2026	8/27/2026	high
316948	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1746)	Nessus	Amazon Linux Local Security Checks	5/27/2026	7/16/2026	high

Detections

Analytics

Plugins Search

high

high