Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcp_find_fc_interface() currently selects the first vendor-specific interface and reads endpoint 0 from it, without checking whether the interface actually has any endpoints. When bNumEndpoints is zero, no endpoint array is allocated for the parsed alternate setting, so get_endpoint(..., 0) yields an invalid endpoint descriptor pointer. Dereferencing it through usb_endpoint_num() then triggers a NULL pointer dereference. Skip vendor-specific interfaces that do not have any endpoints. (CVE-2026-72403)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-72403

medium Nessus 插件 ID 337752

版本 1.11

版本 1.10

版本 1.8

版本 1.6

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.11 Oct 17, 2026, 9:36 AM Detection (updated detection logic) Plugin Feed: 202610170936
版本 1.10 Oct 10, 2026, 5:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610100524
版本 1.8 Oct 9, 2026, 2:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
版本 1.6 Oct 7, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070612
版本 1.5 Aug 28, 2026, 2:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
版本 1.4 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
版本 1.3 Aug 19, 2026, 11:27 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-72403, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608191127
版本 1.2 Aug 19, 2026, 6:09 AM Detection (updated detection logic) New Plugin metadata Plugin Feed: 202608190609