The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6393 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6393-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 21, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-21807 CVE-2026-46093 CVE-2026-53027 CVE-2026-53226                      CVE-2026-53392 CVE-2026-53399 CVE-2026-53402 CVE-2026-63815                      CVE-2026-63816 CVE-2026-63818 CVE-2026-64187 CVE-2026-64189

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.96-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - gpio: rockchip: fix generic IRQ chip leak on remove The driver allocates domain generic chips using     irq_alloc_domain_generic_chips() during probe. However, on driver remove/teardown, the generic chips are     not automatically freed when the IRQ domain is removed because the domain flags do not include     IRQ_DOMAIN_FLAG_DESTROY_GC. This causes both the domain generic chips structure and the associated generic     chips to be leaked. Additionally, the generic chips remain on the global gc_list and may later be visited     by generic IRQ chip suspend, resume, or shutdown callbacks after the GPIO bank has been removed,     potentially resulting in a use-after-free and kernel crash. Fix the resource leak by explicitly calling     irq_domain_remove_generic_chips() before removing the IRQ domain in rockchip_gpio_remove().
    (CVE-2026-53226)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
328799	Debian dsa-6393 : ata-modules-6.12.90+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	7/21/2026	7/21/2026	medium
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	8/1/2026	medium
323457	Linux Distros Unpatched Vulnerability : CVE-2026-53226	Nessus	Misc.	6/28/2026	7/25/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium