The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds     write in statmount_mnt_idmap statmount_mnt_idmap() writes one mapping with seq_printf() and then manually     advances seq->count to include the NUL separator. If seq_printf() overflows, seq_set_overflow() sets     seq->count to seq->size. The manual seq->count++ changes this to seq->size + 1. seq_has_overflowed() then     no longer detects the overflow. The corrupted count returns to statmount_string(), which later executes:
    seq->buf[seq->count++] = '\0'; This causes a 1-byte NULL out-of-bounds write on the dynamically allocated     seq buffer. Fix this by checking for overflow immediately after seq_printf(). (CVE-2026-64074)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
328304	Linux Distros Unpatched Vulnerability : CVE-2026-64074	Nessus	Misc.	7/20/2026	7/31/2026	high
322087	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1881)	Nessus	Amazon Linux Local Security Checks	6/22/2026	7/31/2026	medium

Detections

Analytics

Plugins Search

high

medium