The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than     ETH_HLEN with -EINVAL, and returns -ENOMEM when build_skb() fails. Both paths jump to the err label     without freeing the page that vhost_net_build_xdp() allocated for the frame. tap_sendmsg() discards the     per-buffer return value and always returns 0, so vhost_tx_batch() takes the success path and never frees     the page; each rejected frame in a batch leaks one page-frag chunk. Free the page on both error paths,     before the skb is built. This is the tap counterpart of the same leak in tun_xdp_one(). (CVE-2026-46320)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
326000	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2800-1)	Nessus	SuSE Local Security Checks	2026/7/9	2026/7/15	high
320159	Linux Distros Unpatched Vulnerability : CVE-2026-46320	Nessus	Misc.	2026/6/9	2026/7/29	high
327380	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1924)	Nessus	Amazon Linux Local Security Checks	2026/7/16	2026/7/31	medium
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	2026/7/20	2026/7/31	high

检测

插件搜索

high

high

medium

high