In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-init, so add the missing exp->dir there.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500574 advisory.

    - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin)  [Orabug: 40165811]     {CVE-2026-99999}
    - ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet)  [Orabug: 40165788]     {CVE-2026-98432}
    - exec: Cleanup POSIX timers right after de_thread() (Hyunwoo Kim)  [Orabug: 40120750]  {CVE-2026-98260}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking     uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not     frequently used these days. Intentionally keeps _init as-is because we could theoretically support re-     init, so add the missing exp->dir there. (CVE-2026-98873)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
377778	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8963-1)	Nessus	Ubuntu Local Security Checks	Local	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	Local	high
375804	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8961-1)	Nessus	Ubuntu Local Security Checks	Local	high
375468	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500574)	Nessus	Oracle Linux Local Security Checks	Local	high
375113	Photon OS 5.0: Linux PHSA-2026-5.0-91-1014	Nessus	PhotonOS Local Security Checks	Local	high
375014	Photon OS 5.0: Linux PHSA-2026-5.0-92-1014	Nessus	PhotonOS Local Security Checks	Local	high
373463	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3336)	Nessus	Amazon Linux Local Security Checks	Local	medium
373427	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-136)	Nessus	Amazon Linux Local Security Checks	Local	medium
372052	Linux Distros Unpatched Vulnerability : CVE-2026-98873	Nessus	Misc.	Local	medium
371759	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-119)	Nessus	Amazon Linux Local Security Checks	Local	medium
365258	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)	Nessus	Amazon Linux Local Security Checks	Local	high
365209	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3193)	Nessus	Amazon Linux Local Security Checks	Local	medium

Detections

Analytics

CVE-2026-98873

high

Tenable Plugins

high

high

high

high

high

high

medium

medium

medium

medium

high

medium