The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bit     division and modulo handlers use the kernel abs() macro on s32 operands. The abs() macro documentation     (include/linux/math.h) explicitly states the result is undefined when the input is the type minimum. When     DST contains S32_MIN (0x80000000), abs((s32)DST) triggers undefined behavior and returns S32_MIN unchanged     on arm64/x86. This value is then sign-extended to u64 as 0xFFFFFFFF80000000, causing do_div() to compute     the wrong result. The verifier's abstract interpretation (scalar32_min_max_sdiv) computes the     mathematically correct result for range tracking, creating a verifier/interpreter mismatch that can be     exploited for out-of-bounds map value access. Introduce abs_s32() which handles S32_MIN correctly by     casting to u32 before negating, avoiding signed overflow entirely. Replace all 8 abs((s32)...) call sites     in the interpreter's sdiv32/smod32 handlers. s32 is the only affected case -- the s64 division/modulo     handlers do not use abs(). (CVE-2026-31525)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31525

high Nessus Plugin ID 309800

Version 1.8

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.7 Jun 28, 2026, 7:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606280750
Version 1.6 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.4 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.3 May 2, 2026, 11:12 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.2 Apr 28, 2026, 8:33 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSSv2 severity (based on CVE-2026-31525, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604280833
Version 1.1 Apr 23, 2026, 4:31 AM New Plugin Feed: 202604230431