The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Since     j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is called only when the timer is enabled,     we need to call j1939_session_deactivate_activate_next() if we cancelled the timer. Otherwise, refcount     for j1939_session leaks, which will later appear as | unregister_netdevice: waiting for vcan0 to become     free. Usage count = 2. problem. (CVE-2026-22997)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-22997

medium Nessus Plugin ID 296530

Version 1.3