An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - USB: serial: belkin_sa: validate interrupt status length The Belkin interrupt callback treats interrupt     data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer     length is derived from endpoint wMaxPacketSize, and short interrupt transfers may complete successfully     with a smaller actual_length. Check the completed interrupt packet length before parsing status fields so     short interrupt endpoints and short successful packets are ignored instead of causing out-of-bounds or     stale status-byte reads. KASAN report as below: BUG: KASAN: slab-out-of-bounds in     belkin_sa_read_int_callback() Read of size 1 Call trace: belkin_sa_read_int_callback()     (drivers/usb/serial/belkin_sa.c:202) __usb_hcd_giveback_urb() (drivers/usb/core/hcd.c:1630) dummy_timer()     (?:?) (CVE-2026-63903)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	7/24/2026	7/28/2026	high
328270	Linux Distros Unpatched Vulnerability : CVE-2026-63903	Nessus	Misc.	7/20/2026	7/29/2026	medium
325574	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-124 (ALASKERNEL-5.10-2026-124)	Nessus	Amazon Linux Local Security Checks	7/8/2026	7/31/2026	high

Detections

Analytics

Plugins Search

high

medium

high