The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrfs: skip global block reserve accounting for rescue mounts [BUG] Mounting with rescue=ibadroots after     corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer     dereference, address: 0000000000000100 RIP: 0010:btrfs_update_global_block_rsv+0x9d/0x1c0 [btrfs] Call     Trace: fill_dummy_bgs+0xd4/0x120 [btrfs] open_ctree+0xc6e/0x1ca0 [btrfs] btrfs_get_tree+0x50d/0xa40     [btrfs] The same crash occurs with a corrupted raid stripe tree root, via btrfs_read_block_groups()     instead of fill_dummy_bgs(). [CAUSE] With rescue=ibadroots, btrfs_read_roots() allows the mount to     continue when either root cannot be read, leaving the corresponding root pointer NULL while its on-disk     feature bit remains set. btrfs_update_global_block_rsv() then dereferences the missing root based on the     feature bit alone. [FIX] Rescue mounts are fully read-only and cannot start transactions, so the global     reserve is never consumed. Under btrfs_is_full_ro(), mark the reserve as full and return before performing     the accounting. And since we need to check if the fs is mount fully RO, export fs_is_full_ro() as     btrfs_is_full_ro(), and move it to fs.h. [ Squash the fs_is_full_ro() export commit into this one. ]     (CVE-2026-74571)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
335811	Linux Distros Unpatched Vulnerability : CVE-2026-74571	Nessus	Misc.	8/15/2026	11/7/2026	medium
375080	Photon OS 5.0: Linux PHSA-2026-5.0-91-0996	Nessus	PhotonOS Local Security Checks	11/2/2026	11/2/2026	high
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	9/25/2026	9/28/2026	high
377900	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)	Nessus	Amazon Linux Local Security Checks	11/9/2026	11/9/2026	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high
347900	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:4254-1)	Nessus	SuSE Local Security Checks	9/18/2026	9/29/2026	high

Detections

Analytics

Plugins Search

medium

high

high

high

high

high