The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_ioam()     accesses __in6_dev_get(skb->dev)->cnf.ioam6_enabled without validating the returned idev pointer. Because     addrconf_ifdown() can concurrently clear dev->ip6_ptr via RCU, __in6_dev_get() can return NULL during     interface teardown, which could cause a NULL pointer dereference when processing an IOAM Hop-by-Hop     option. Let's add a check and use SKB_DROP_REASON_IPV6DISABLED accordingly. (CVE-2026-64116)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
328000	Linux Distros Unpatched Vulnerability : CVE-2026-64116	Nessus	Misc.	2026/7/20	2026/9/30	high
333941	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/9/19	high

偵測

搜尋 Plugin

high

high