The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer In mana_hwc_rx_event_handler(),     resp->response.hwc_msg_id is read from DMA-coherent memory and bounds-checked, then mana_hwc_handle_resp()     re-reads the same field from the same DMA buffer for test_bit() and pointer arithmetic. DMA-coherent     memory is mapped uncacheable on x86 and is shared, unencrypted, in Confidential VMs (SEV-SNP/TDX), so each     load goes directly to host-visible memory. A H/W can modify the value between the check and the use,     bypassing the bounds validation. Fix this by reading hwc_msg_id exactly once using READ_ONCE() into a     stack-local variable in mana_hwc_rx_event_handler(), and passing the validated value as a parameter to     mana_hwc_handle_resp(). (CVE-2026-64034)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
328056	Linux Distros Unpatched Vulnerability : CVE-2026-64034	Nessus	Misc.	7/20/2026	8/1/2026	critical
318773	Photon OS 5.0: Linux PHSA-2026-5.0-0864	Nessus	PhotonOS Local Security Checks	6/5/2026	8/1/2026	high
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	7/24/2026	7/28/2026	high

Detections

Analytics

Plugins Search

critical

high

high