The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the     handshake genl family, both intended for use by the trusted handshake agent (tlshd). ACCEPT already     requires GENL_ADMIN_PERM; DONE has no privilege check at all. The fd-lookup in handshake_nl_done_doit()     only confirms that some pending handshake request exists for the supplied sockfd; it does not authenticate     the sender. An unprivileged process that guesses or observes a valid sockfd can therefore submit a DONE     with HANDSHAKE_A_DONE_STATUS == 0, leaving the kernel consumer to proceed as if the handshake succeeded. A     non-zero status on a forged DONE tears down a legitimate in-flight handshake before tlshd can report its     real result. (CVE-2026-74270)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
365525	Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8918-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	2026/9/25	2026/9/28	high
337486	Linux Distros Unpatched Vulnerability : CVE-2026-74270	Nessus	Misc.	2026/8/18	2026/10/8	high
365767	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8887-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium
365522	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8917-1)	Nessus	Ubuntu Local Security Checks	2026/10/14	2026/10/14	medium

检测

插件搜索

medium

high

high

medium

medium