The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor ZCR_EL2 can be updated by a VHE guest     hypervisor either using ZCR_EL2 (which traps) or ZCR_EL1 (which does not trap). KVM handles both in     different way: - on ZCR_EL2 trap, ZCR_EL2.LEN is immediately capped at the VM's own VL limit. This has the     potential to break existing SW that relies on the full LEN field to be stateful. - on ZCR_EL1 access, we     do absolutely nothing. On restoring the SVE context for an L2 guest, we directly restore the guest     hypervisor's view of ZCR_EL2 into the physical ZCR_EL2. If the guest's view of the register was updated     using the ZCR_EL2 accessor, the value has already been sanitised (with the caveat mentioned above). But if     the guest used ZCR_EL1, the raw value is written into the HW, and the L2 guest can now access VLs that it     shouldn't. Fix all the above by moving the VL capping to the restore points, ensuring that: - the HW is     always programmed with a capped value, irrespective of the accessor being used, - the ZCR_EL2.LEN field is     always completely stateful, irrespective of the accessor being used. Additionally, move ZCR_EL2 to be a     sanitised register, ensuring that only the LEN field is actually stateful. This requires some creative     construction of the RES0 mask, as the sysreg generation script does not yet generate RAZ/WI fields. [maz:
    rewrote commit message, tidy up access_zcr_el2()] (CVE-2026-63941)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/24/2026	high
327922	Linux Distros Unpatched Vulnerability : CVE-2026-63941	Nessus	Misc.	7/20/2026	10/6/2026	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/24/2026	high
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	9/25/2026	9/28/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/23/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high