The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko review pointed it     out that group->domain could be NULL when a default domain fails to allocate during the first probe, which     can crash at domain->ops->attach_dev dereference in __iommu_attach_device() invoked by     pci_dev_reset_iommu_done(). pci_dev_reset_iommu_prepare() is fine as an old_domain pointer can be NULL.
    Skip the re-attach in pci_dev_reset_iommu_done() to fix the bug. (CVE-2026-53280)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
323768	Linux Distros Unpatched Vulnerability : CVE-2026-53280	Nessus	Misc.	6/30/2026	10/23/2026	medium
340681	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	10/14/2026	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/24/2026	high

Detections

Analytics

Plugins Search

medium

high

high