In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on
    vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need
    to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically, it must be avoided
    to have (private) futex waiters before allocating the private hash. (CVE-2026-98281)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the     mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM     user. Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.
    (CVE-2026-98281)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
475261	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.126	Tenable Cloud Security	Google COS Security Checks	Local	high
475261	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.126	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
365258	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)	Nessus	Amazon Linux Local Security Checks	Local	high
364249	Linux Distros Unpatched Vulnerability : CVE-2026-98281	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-98281

high

Tenable Plugins

high

high

high

high