An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks When parsing endpoint     descriptors, ffs_data_got_descs() generates the eps_addrmap which contains the endpoint direction.
    However, epfile->in was previously only populated in ffs_func_eps_enable() which executes upon USB host     connection. As a result, early userspace ioctls like FUNCTIONFS_DMABUF_ATTACH that run before the host     connects would see epfile->in as 0, leading to incorrect DMA directions. By moving the initialization to     ffs_epfiles_create(), epfile->in is accurate before userspace opens the endpoint files. (CVE-2026-64327)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	8/1/2026	medium
329942	Linux Distros Unpatched Vulnerability : CVE-2026-64327	Nessus	Misc.	7/25/2026	7/31/2026	medium

Detections

Analytics

Plugins Search

medium

medium