The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before     releasing devres VFIO device debugfs files created with debugfs_create_devm_seqfile() store a devres     allocated debugfs_devm_entry as inode private data. vfio_unregister_group_dev() currently calls     vfio_device_del() before vfio_device_debugfs_exit(), but device_del() releases devres. This can leave     debugfs entries visible with stale inode private data while unregister waits for userspace references to     drain. Remove the per-device debugfs tree before vfio_device_del(). The debugfs view is diagnostic only,     so losing it at the start of unregister is preferable to preserving entries whose backing storage may     already have been released. Complete the teardown by clearing the per-device debugfs root after removal.
    This matches the global debugfs root cleanup and prevents future users from mistaking a removed dentry for     a live debugfs tree during the remainder of unregister. (CVE-2026-64473)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
329761	Linux Distros Unpatched Vulnerability : CVE-2026-64473	Nessus	Misc.	2026/7/25	2026/10/14	high
366742	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)	Nessus	SuSE Local Security Checks	2026/10/17	2026/10/17	high

检测

插件搜索

high

high