The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the     radiotap namespace (not with vendor namespaces), but if the undefined field 18 is used, the alignment/size     is unknown as well. In this case, iterator->_next_ns_data isn't initialized (it's only set for skipping     vendor namespaces), and syzbot points out that we later compare against this uninitialized value. Fix this     by moving the rejection of unknown radiotap fields down to after the in-namespace lookup, so it will     really use iterator->_next_ns_data only for vendor namespaces, even in case undefined fields are present.
    (CVE-2026-23367)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23367

high Nessus Plugin ID 303663

Version 1.2

Version 1.1

Version 1.2 Mar 26, 2026, 9:39 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202603260939
Version 1.1 Mar 26, 2026, 1:29 AM New Plugin Feed: 202603260129