The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA     element in probe resp We recently added some validation that we don't try to connect to an AP that is     currently in a channel switch process, since that might want the channel to be quiet or we might not be     able to connect in time to hear the switching in a beacon. This was in commit c09c4f31998b (wifi:
    mac80211: don't connect to an AP while it's in a CSA process). However, we promptly got a report that     this caused new connection failures, and it turns out that the AP that we now cannot connect to is     permanently advertising an extended channel switch announcement, even with quiet. The AP in question was     an Asus RT-AC53, with firmware 3.0.0.4.380_10760-g21a5898. As a first step, attempt to detect that we're     dealing with such a situation, so mac80211 can use this later. (CVE-2024-26683)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-26683

medium Nessus Plugin ID 246172

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Jul 18, 2026, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.3 Sep 20, 2025, 5:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509200527
Version 1.1 Aug 8, 2025, 11:45 PM New Plugin Feed: 202508082345