In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo arguments as scalar The signal_generate and signal_deliver tracepoints declare their info argument as a struct kernel_siginfo pointer. btf_ctx_access() therefore treats it as a trusted pointer for tp_btf programs. Signal delivery also uses SEND_SIG_NOINFO and SEND_SIG_PRIV as special values for this argument. Those values are zero and one respectively, and are not pointers. A tp_btf program can currently dereference either value and fault the kernel. In particular, signal_generate can run from timer interrupt context, turning the fault into a kernel panic. Record both tracepoints in raw_tp_null_args[] and mark argument one as a non-pointer. This preserves scalar access to the cookie while rejecting direct and helper-mediated pointer use. Merely marking it nullable would not suffice because SEND_SIG_PRIV is nonzero.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo
    arguments as scalar The signal_generate and signal_deliver tracepoints declare their info argument as a
    struct kernel_siginfo pointer. btf_ctx_access() therefore treats it as a trusted pointer for tp_btf
    programs. Signal delivery also uses SEND_SIG_NOINFO and SEND_SIG_PRIV as special values for this argument.
    Those values are zero and one respectively, and are not pointers. A tp_btf program can currently
    dereference either value and fault the kernel. In particular, signal_generate can run from timer interrupt
    context, turning the fault into a kernel panic. Record both tracepoints in raw_tp_null_args[] and mark
    argument one as a non-pointer. This preserves scalar access to the cookie while rejecting direct and
    helper-mediated pointer use. Merely marking it nullable would not suffice because SEND_SIG_PRIV is
    nonzero. (CVE-2026-98062)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Mark signal tracepoint siginfo arguments as scalar The signal_generate and signal_deliver tracepoints     declare their info argument as a struct kernel_siginfo pointer. btf_ctx_access() therefore treats it as a     trusted pointer for tp_btf programs. Signal delivery also uses SEND_SIG_NOINFO and SEND_SIG_PRIV as     special values for this argument. Those values are zero and one respectively, and are not pointers. A     tp_btf program can currently dereference either value and fault the kernel. In particular, signal_generate     can run from timer interrupt context, turning the fault into a kernel panic. Record both tracepoints in     raw_tp_null_args[] and mark argument one as a non-pointer. This preserves scalar access to the cookie     while rejecting direct and helper-mediated pointer use. Merely marking it nullable would not suffice     because SEND_SIG_PRIV is nonzero. (CVE-2026-98062)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	Local	high
475761	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Cloud Security	Google COS Security Checks	Local	medium
475761	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
474733	Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
474733	Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
365258	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)	Nessus	Amazon Linux Local Security Checks	Local	high
350552	Linux Distros Unpatched Vulnerability : CVE-2026-98062	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-98062

medium

Tenable Plugins

high

medium

medium

medium

medium

high

medium