The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under     scx_cgroup_ops_rwsem in cgroup setters scx_group_set_{weight,idle,bandwidth}() cache scx_root before     acquiring scx_cgroup_ops_rwsem, so the pointer can be stale by the time the op runs. If the loaded     scheduler is disabled and freed (via RCU work) and another is enabled between the naked load and the rwsem     acquire, the reader sees scx_cgroup_enabled=true (the new scheduler's) but dereferences the freed one -     UAF on SCX_HAS_OP(sch, ...) / SCX_CALL_OP(sch, ...). scx_cgroup_enabled is toggled only under     scx_cgroup_ops_rwsem write (scx_cgroup_{init,exit}), so reading scx_root inside the rwsem read section     correlates @sch with the enabled snapshot. (CVE-2026-46154)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
322020	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1866)	Nessus	Amazon Linux Local Security Checks	6/22/2026	7/31/2026	high
318445	Linux Distros Unpatched Vulnerability : CVE-2026-46154	Nessus	Misc.	6/3/2026	7/31/2026	high

Detections

Analytics

Plugins Search

high

high