The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Apparently ICL may hang with an MCE     if we write TRANS_VRR_VMAX/FLIPLINE before enabling TRANS_DDI_FUNC_CTL. Personally I was only able to     reproduce a hang (on an Dell XPS 7390 2-in-1) with an external display connected via a dock using a dodgy     type-C cable that made the link training fail. After the failed link training the machine would hang. TGL     seemed immune to the problem for whatever reason. BSpec does tell us to configure VRR after enabling     TRANS_DDI_FUNC_CTL as well. The DMC firmware also does the VRR restore in two stages: - first stage seems     to be unconditional and includes TRANS_VRR_CTL and a few other VRR registers, among other things - second     stage is conditional on the DDI being enabled, and includes TRANS_DDI_FUNC_CTL and     TRANS_VRR_VMAX/VMIN/FLIPLINE, among other things So let's reorder the steps to match to avoid the hang,     and toss in an extra WARN to make sure we don't screw this up later. BSpec: 22243 (cherry picked from     commit 93f3a267c3dd4d811b224bb9e179a10d81456a74) (CVE-2026-43477)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
314474	Linux Distros Unpatched Vulnerability : CVE-2026-43477	Nessus	Misc.	5/13/2026	5/25/2026	high
311340	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)	Nessus	Amazon Linux Local Security Checks	4/30/2026	5/20/2026	high

Detections

Analytics

Plugins Search

high

high