The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made     of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init()     stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(),     leaving an explicit empty iterator for callers that ignore the init return, and make     of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.
    (CVE-2026-74491)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
335755	Linux Distros Unpatched Vulnerability : CVE-2026-74491	Nessus	Misc.	8/15/2026	8/27/2026	medium
341888	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2106)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/1/2026	high

Detections

Analytics

Plugins Search

medium

high