The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - esp: do not unref managed frag pages in esp_ssg_unref() esp_ssg_unref() releases the page references held     on the source scatterlist after the AEAD operation completes. It calls skb_page_unref() on every frag page     for an out-of-place transform (req->src != req->dst), and in the error path of esp_output_tail()     (already_unref == true) on the request's own scatterlist. This is wrong when the skb carries managed frags     (SKBFL_MANAGED_FRAG_REFS). Managed frags are owned by a zerocopy ubuf and the skb does not hold a per-frag     page reference; io_uring SEND_ZC with a registered buffer attaches the bvec pages this way via     io_sg_from_iter(). The rest of the stack honours this invariant: skb_release_data() skips the per-frag     unref when SKBFL_MANAGED_FRAG_REFS is set, and skb_zcopy_managed() is the guard used at the other unref     sites. esp_ssg_unref() is missing that guard, so for a managed-frag skb it drops a page reference the skb     never acquired. This can underflow the page reference count and free a page that is still in use. Guard     the function with skb_zcopy_managed() so both unref paths are skipped for managed-frag skbs, matching     skb_release_data(). (CVE-2026-93105)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
377900	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)	Nessus	Amazon Linux Local Security Checks	11/9/2026	11/9/2026	high
347630	Linux Distros Unpatched Vulnerability : CVE-2026-93105	Nessus	Misc.	9/18/2026	11/6/2026	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

high

high

high