The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: ena: PHC: Fix potential use-after-free in get_timestamp Move the phc->active check and resp pointer     assignment to after acquiring the spinlock. Previously, phc->active was checked without holding the lock,     and resp was cached from ena_dev->phc.virt_addr before the lock was acquired. If ena_com_phc_destroy()     runs between the lockless active check and the lock acquisition, it sets active=false, releases the lock,     frees the DMA memory, and sets virt_addr=NULL. The get_timestamp path would then read a NULL virt_addr and     dereference it. With both the active check and the pointer read under the lock, destroy cannot free the     memory while get_timestamp is using it. (CVE-2026-52971)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
323371	Linux Distros Unpatched Vulnerability : CVE-2026-52971	Nessus	Misc.	6/28/2026	8/28/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high

Detections

Analytics

Plugins Search

high

high

high