In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before the failure are never unmapped, leaking DMA mappings. Fix the leak by walking back over the descriptors used by the frame and releasing each of them with stmmac_free_tx_buffer(). Moreover, release the descriptors with stmmac_release_tx_desc() unmapping the DMA buffers.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in
    stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an skb fragment fails, the frame is dropped
    but the DMA mappings already created for the linear part and for the fragments mapped before the failure
    are never unmapped, leaking DMA mappings. Fix the leak by walking back over the descriptors used by the
    frame and releasing each of them with stmmac_free_tx_buffer(). Moreover, release the descriptors with
    stmmac_release_tx_desc() unmapping the DMA buffers. (CVE-2026-98131)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an skb     fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the     fragments mapped before the failure are never unmapped, leaking DMA mappings. Fix the leak by walking back     over the descriptors used by the frame and releasing each of them with stmmac_free_tx_buffer(). Moreover,     release the descriptors with stmmac_release_tx_desc() unmapping the DMA buffers. (CVE-2026-98131)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	Local	high
474671	Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
474671	Chainguard: linux-desktop-7.2-bootc: security update to 7.2.7-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
350339	Linux Distros Unpatched Vulnerability : CVE-2026-98131	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-98131

medium

Tenable Plugins

high

medium

medium

medium