An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue The logic used to abort the DMA ring     contains several flaws: 1. The driver unconditionally issues a ring abort even when the ring has already     stopped. 2. The completion used to wait for abort completion is never re-initialized, resulting in     incorrect wait behavior. 3. The abort sequence unintentionally clears RING_CTRL_ENABLE, which resets     hardware ring pointers and disrupts the controller state. 4. If the ring is already stopped, the abort     operation should be considered successful without attempting further action. Fix the abort handling by     checking whether the ring is running before issuing an abort, re-initializing the completion when needed,     ensuring that RING_CTRL_ENABLE remains asserted during abort, and treating an already stopped ring as a     successful condition. (CVE-2026-43352)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
319599	Photon OS 5.0: Linux PHSA-2026-5.0-0862	Nessus	PhotonOS Local Security Checks	6/6/2026	7/22/2026	high
313303	Linux Distros Unpatched Vulnerability : CVE-2026-43352	Nessus	Misc.	5/8/2026	7/25/2026	high

Detections

Analytics

Plugins Search

high

high