The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073358 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ALSA: pcm: oss: Fix setup list UAF on proc write error

    snd_pcm_oss_proc_write() links a newly allocated setup entry into the     OSS setup list before duplicating the task name. If the task-name     allocation fails, the error path frees the already linked entry and     leaves setup_list pointing at freed memory.

    A later OSS device open can then walk the stale list entry in     snd_pcm_oss_look_for_setup() and dereference freed memory.

    Allocate the task name and initialize the setup entry before publishing     the entry on setup_list. Also fetch the initial proc read iterator only     after taking setup_mutex, so all setup_list traversal follows the same     list lifetime rules.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: pcm: oss: Fix setup list UAF on proc write error snd_pcm_oss_proc_write() links a newly allocated     setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails,     the error path frees the already linked entry and leaves setup_list pointing at freed memory. A later OSS     device open can then walk the stale list entry in snd_pcm_oss_look_for_setup() and dereference freed     memory. Allocate the task name and initialize the setup entry before publishing the entry on setup_list.
    Also fetch the initial proc read iterator only after taking setup_mutex, so all setup_list traversal     follows the same list lifetime rules. (CVE-2026-64001)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
343273	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073358)	Nessus	Unity Linux Local Security Checks	9/6/2026	9/6/2026	high
322944	Photon OS 5.0: Linux PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	6/26/2026	8/25/2026	high
327924	Linux Distros Unpatched Vulnerability : CVE-2026-64001	Nessus	Misc.	7/20/2026	9/7/2026	medium
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/10/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
333762	Photon OS 5.0: Linux PHSA-2026-5.0-92-0895	Nessus	PhotonOS Local Security Checks	8/10/2026	8/21/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high

high

high

high