There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local
    storage in NMI Currently, local storage may deadlock when deferring freeing selem or local storage through
    kfree_rcu(), call_rcu() or call_rcu_tasks_trace() in NMI or reentrant. Since deleting selem in NMI is an
    unlikely use case, partially mitigate it by returning error when calling from bpf_xxx_storage_delete()
    helpers in NMI. Note that, it is still possible to deadlock through reentrant. A full mitigation requires
    returning error when irqs_disabled() is true, which, however is too heavy-handed for
    bpf_xxx_storage_delete(). The long-term solution requires _nolock versions of call_rcu. Another possible
    solution is to defer the free through irq_work [0], but it would grow the size of selem, which is non-
    ideal. The check is only needed in bpf_selem_unlink(), which is used by helpers and syscalls.
    bpf_selem_unlink_nofail() is fine as it is called during map and owner tear down that never run in NMI or
    reentrant. [0] https://lore.kernel.org/bpf/20260205190233.912-1-alexei.starovoitov@gmail.com/
    (CVE-2026-53106)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Do not allow deleting local storage in NMI Currently, local storage may deadlock when deferring     freeing selem or local storage through kfree_rcu(), call_rcu() or call_rcu_tasks_trace() in NMI or     reentrant. Since deleting selem in NMI is an unlikely use case, partially mitigate it by returning error     when calling from bpf_xxx_storage_delete() helpers in NMI. Note that, it is still possible to deadlock     through reentrant. A full mitigation requires returning error when irqs_disabled() is true, which, however     is too heavy-handed for bpf_xxx_storage_delete(). The long-term solution requires _nolock versions of     call_rcu. Another possible solution is to defer the free through irq_work [0], but it would grow the size     of selem, which is non-ideal. The check is only needed in bpf_selem_unlink(), which is used by helpers and     syscalls. bpf_selem_unlink_nofail() is fine as it is called during map and owner tear down that never run     in NMI or reentrant. [0] https://lore.kernel.org/bpf/20260205190233.912-1-alexei.starovoitov@gmail.com/     (CVE-2026-53106)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
472555	Chainguard: linux-qemu-melange: security update to 6.18.49-r2	Tenable Cloud Security	Chainguard Local Security Checks	10/3/2026	10/17/2026	medium
472555	Chainguard: linux-qemu-melange: security update to 6.18.49-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	10/3/2026	10/17/2026	medium
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	8/13/2026	9/19/2026	high
322646	Linux Distros Unpatched Vulnerability : CVE-2026-53106	Nessus	Misc.	6/25/2026	10/15/2026	medium
340681	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	10/14/2026	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/24/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/23/2026	high
341024	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3790-1)	Nessus	SuSE Local Security Checks	8/27/2026	9/29/2026	high

Detections

Analytics

Plugins Search

medium

medium

high

medium

high

high

high

high