The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before     releasing devres VFIO device debugfs files created with debugfs_create_devm_seqfile() store a devres     allocated debugfs_devm_entry as inode private data. vfio_unregister_group_dev() currently calls     vfio_device_del() before vfio_device_debugfs_exit(), but device_del() releases devres. This can leave     debugfs entries visible with stale inode private data while unregister waits for userspace references to     drain. Remove the per-device debugfs tree before vfio_device_del(). The debugfs view is diagnostic only,     so losing it at the start of unregister is preferable to preserving entries whose backing storage may     already have been released. Complete the teardown by clearing the per-device debugfs root after removal.
    This matches the global debugfs root cleanup and prevents future users from mistaking a removed dentry for     a live debugfs tree during the remainder of unregister. (CVE-2026-64473)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
329761	Linux Distros Unpatched Vulnerability : CVE-2026-64473	Nessus	Misc.	2026/7/25	2026/11/6	high
366742	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)	Nessus	SuSE Local Security Checks	2026/10/17	2026/10/17	high
343049	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	Nessus	Oracle Linux Local Security Checks	2026/9/4	2026/9/23	high

検出

プラグインの検索

high

high

high