The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assumes that     update_bw_bounding_box() is valid when entering the update path. However, the existing condition:
    ((!fams2_enable && update_bw_bounding_box) || freq_changed) does not guarantee this, as the freq_changed     branch can evaluate to true independently of the callback pointer. This can result in calling     update_bw_bounding_box() when it is NULL. Fix this by separating the update condition from the pointer     checks and ensuring the callback, dc->clk_mgr, and bw_params are validated before use. Fixes the below:
    ../dc/hwss/dcn401/dcn401_hwseq.c:367 dcn401_init_hw() error: we previously assumed     'dc->res_pool->funcs->update_bw_bounding_box' could be null (see line 362) (cherry picked from commit     86117c5ab42f21562fedb0a64bffea3ee5fcd477) (CVE-2026-43337)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
329149	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	7/23/2026	9/29/2026	medium
329305	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21388-1)	Nessus	SuSE Local Security Checks	7/24/2026	9/19/2026	high
313339	Linux Distros Unpatched Vulnerability : CVE-2026-43337	Nessus	Misc.	5/8/2026	11/2/2026	medium

Detections

Analytics

Plugins Search

medium

high

medium