The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size of a     directory entry in size_t but stores it in a __u32. An entry length near U32_MAX wraps it to a small     value, bypasses the bounds check, and is then used to index the entry, reading far past the directory part
    -- an out-of-bounds read that oopses the kernel. Compute the size as a u64 so it cannot truncate; the     bounds check then rejects the entry. The trailer is supplied by the userspace client. (CVE-2026-72033)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104577 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    orangefs: keep the readdir entry size 64-bit in fill_from_part()

    fill_from_part() computes the size of a directory entry in size_t but     stores it in a __u32. An entry length near U32_MAX wraps it to a small     value, bypasses the bounds check, and is then used to index the entry,     reading far past the directory part -- an out-of-bounds read that oopses     the kernel.

    Compute the size as a u64 so it cannot truncate; the bounds check then     rejects the entry. The trailer is supplied by the userspace client.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
337354	Linux Distros Unpatched Vulnerability : CVE-2026-72033	Nessus	Misc.	8/18/2026	8/28/2026	critical
339629	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104577)	Nessus	Unity Linux Local Security Checks	8/26/2026	8/26/2026	critical
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/7/2026	high

Detections

Analytics

Plugins Search

critical

critical

high