In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable When bpf_btf_find_by_name_kind() finds a type in module BTF, it returns a new BTF object fd through __btf_new_fd(). This reaches anon_inode_getfd(), which can sleep while allocating or expanding the current task fd table. The helper prototype does not set might_sleep, so the verifier allows the helper in non-sleepable contexts such as BPF timer callbacks. The fd allocation can then sleep in softirq context and install the fd into the interrupted task. Mark the helper as sleepable. This preserves calls from the main body of a sleepable syscall program while rejecting calls from its non-sleepable regions.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind()
    as sleepable When bpf_btf_find_by_name_kind() finds a type in module BTF, it returns a new BTF object fd
    through __btf_new_fd(). This reaches anon_inode_getfd(), which can sleep while allocating or expanding the
    current task fd table. The helper prototype does not set might_sleep, so the verifier allows the helper in
    non-sleepable contexts such as BPF timer callbacks. The fd allocation can then sleep in softirq context
    and install the fd into the interrupted task. Mark the helper as sleepable. This preserves calls from the
    main body of a sleepable syscall program while rejecting calls from its non-sleepable regions.
    (CVE-2026-98046)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Mark bpf_btf_find_by_name_kind() as sleepable When bpf_btf_find_by_name_kind() finds a type in module     BTF, it returns a new BTF object fd through __btf_new_fd(). This reaches anon_inode_getfd(), which can     sleep while allocating or expanding the current task fd table. The helper prototype does not set     might_sleep, so the verifier allows the helper in non-sleepable contexts such as BPF timer callbacks. The     fd allocation can then sleep in softirq context and install the fd into the interrupted task. Mark the     helper as sleepable. This preserves calls from the main body of a sleepable syscall program while     rejecting calls from its non-sleepable regions. (CVE-2026-98046)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
475403	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Cloud Security	Google COS Security Checks	Local	high
475403	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
365209	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3193)	Nessus	Amazon Linux Local Security Checks	Local	medium
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	Local	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
350583	Linux Distros Unpatched Vulnerability : CVE-2026-98046	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-98046

high

Tenable Plugins

high

high

medium

high

high

high

high