An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc rxrpc_recvmsg_data() calls rxrpc_verify_data()     whenever the rxrpc_call.rx_dec_buffer is unallocated and assumes that upon successful return that     rx_dec_buffer must be allocated. However, rxrpc_verify_data() does not request an allocation if the     rxrpc_skb_priv.len is zero. In addition, failure to allocate rx_dec_buffer will result in a call to     skb_copy_bits() with a NULL destination which can trigger a NULL pointer dereference. To prevent these     issues rxrpc_verify_data() is modified to always attempt to allocate the rxrpc_call.rx_dec_buffer if it is     NULL. This issue was identified with assistance of a private sashiko instance. (CVE-2026-74435)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/4/2026	high
343049	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	Nessus	Oracle Linux Local Security Checks	9/4/2026	9/5/2026	high
337495	Linux Distros Unpatched Vulnerability : CVE-2026-74435	Nessus	Misc.	8/18/2026	9/2/2026	high

Detections

Analytics

Plugins Search

high

high

high