The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104498 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    apparmor: check label build before no_new_privs test

    aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build     helper can fail and return NULL or an ERR_PTR, but the result was passed     to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()     check.

    Reuse the existing target-label build failure handling immediately after     the build. This preserves the current audit handling while preventing the     subset helper from dereferencing an invalid label.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build helper can fail and return NULL     or an ERR_PTR, but the result was passed to aa_label_is_unconfined_subset() before the existing     IS_ERR_OR_NULL() check. Reuse the existing target-label build failure handling immediately after the     build. This preserves the current audit handling while preventing the subset helper from dereferencing an     invalid label. (CVE-2026-72460)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    apparmor: check label build before no_new_privs test

    aa_change_profile() builds a replacement label with     fn_label_build_in_scope() before the no_new_privs subset check. The build     helper can fail and return NULL or an ERR_PTR, but the result was passed     to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL()     check.

    Reuse the existing target-label build failure handling immediately after     the build. This preserves the current audit handling while preventing the     subset helper from dereferencing an invalid label.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
341829	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104498)	Nessus	Unity Linux Local Security Checks	8/31/2026	8/31/2026	high
337421	Linux Distros Unpatched Vulnerability : CVE-2026-72460	Nessus	Misc.	8/18/2026	8/28/2026	high
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/7/2026	high
339637	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)	Nessus	Unity Linux Local Security Checks	8/26/2026	8/26/2026	high

Detections

Analytics

Plugins Search

high

high

high

high