The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210_test_int_driver_write() and     ca8210_test_int_user_read() exchange a kmalloc'd buffer pointer through a struct kfifo, but pass a literal     '4' as the byte count to kfifo_in()/kfifo_out(). This is correct on 32-bit (pointer = 4 bytes), but on     64-bit only the low 4 bytes of the 8-byte pointer are written into the FIFO. The reader then reads back 4     bytes into an 8-byte local pointer variable, leaving the upper 4 bytes uninitialized stack data. The first     dereference of the reconstructed pointer (fifo_buffer[1]) accesses an arbitrary kernel address and     generally results in an oops. Use sizeof(fifo_buffer) so the byte count matches pointer width on every     architecture. The driver has no architecture restriction in Kconfig, so any 64-bit build with     CONFIG_IEEE802154_CA8210_DEBUGFS=y is exposed. Issue has been latent since the driver was added in 2017     because it is most commonly deployed on 32-bit MCUs. Found via a custom Coccinelle semantic patch hunting     for short-byte kfifo I/O on byte-mode kfifos used to shuttle pointers. (CVE-2026-72047)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
337782	Linux Distros Unpatched Vulnerability : CVE-2026-72047	Nessus	Misc.	8/18/2026	8/27/2026	medium
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/7/2026	high

Detections

Analytics

Plugins Search

medium

high