The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the     helper name. Using nfct_help() without holding a reference to the master conntrack is unsafe. Use     exp->master->helper in ctnetlink path if userspace does not provide an explicit helper when creating an     expectation to retain the existing behaviour. The ctnetlink expectation path holds the reference on the     master conntrack and nf_conntrack_expect lock and the nfnetlink glue path refers to the master ct that is     attached to the skb. (CVE-2026-31414)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31414

critical Nessus Plugin ID 306172

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 May 3, 2026, 4:59 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.4 May 2, 2026, 11:12 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.3 Apr 25, 2026, 4:14 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 8.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-31414, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604251614
Version 1.2 Apr 14, 2026, 10:48 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604142248
Version 1.1 Apr 13, 2026, 9:27 PM New Plugin Feed: 202604132127