The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Two IE parsing loops     are missing the header bounds checks before they dereference pIE->length: - issue_assocreq() walks     pmlmeinfo->network.ies to build the association request. If the stored IE data ends with only an     element_id byte and no length byte, pIE->length is read one byte past the end of the buffer. -     join_cmd_hdl() walks pnetwork->ies during station join and has the same problem under the same conditions.
    Both buffers are filled from AP beacon and probe-response frames, so a malicious AP that sends a truncated     final IE can trigger the issue. Apply the two-guard pattern established in update_beacon_info(): 1. Break     if fewer than sizeof(*pIE) bytes remain. 2. Break if the IE's declared data extends past the buffer end.
    (CVE-2026-64442)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
329836	Linux Distros Unpatched Vulnerability : CVE-2026-64442	Nessus	Misc.	7/25/2026	7/28/2026	high
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	8/1/2026	medium

Detections

Analytics

Plugins Search

high

medium