The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a     certificate with empty Basic Constraints or Key Usage extension because the first byte of the extension is     read before checking its length. Fix it. The bug can be triggered by an unprivileged user by submitting a     specially crafted certificate to the kernel through the keyrings(7) API. Leo has demonstrated this with a     proof-of-concept program responsibly disclosed off-list. (CVE-2026-31430)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31430

high Nessus Plugin ID 307607

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 May 2, 2026, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.4 Apr 28, 2026, 8:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604280833
Version 1.3 Apr 25, 2026, 11:38 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604251138
Version 1.2 Apr 21, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604211807
Version 1.1 Apr 20, 2026, 10:26 PM New Plugin Feed: 202604202226