The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengine_prep_slave_sg() fails     for the TX channel, the error path terminates the TX DMA channel but leaves the RX channel running. Since     the RX channel was already submitted and issued prior to preparing the TX descriptor, returning -EINVAL     causes the SPI core to unmap the DMA buffers while the RX DMA engine continues writing to them, leading to     potential memory corruption or use-after-free. Terminate the RX channel before returning on the TX prepare     failure path. (CVE-2026-64303)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
329863	Linux Distros Unpatched Vulnerability : CVE-2026-64303	Nessus	Misc.	7/25/2026	7/29/2026	critical
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	8/1/2026	medium

Detections

Analytics

Plugins Search

critical

medium