The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in     tls_do_encryption(), introduced by commit 859054147318 (net: tls: handle backlogging of crypto     requests), has a use-after-free due to double cleanup of encrypt_pending and the scatterlist entry. When     crypto_aead_encrypt() returns -EBUSY, the request is enqueued to the cryptd backlog and the async callback     tls_encrypt_done() will be invoked upon completion. That callback unconditionally restores the scatterlist     entry (sge->offset, sge->length) and decrements ctx->encrypt_pending. However, if tls_encrypt_async_wait()     returns an error, the synchronous error path in tls_do_encryption() performs the same cleanup again,     double-decrementing encrypt_pending and double-restoring the scatterlist. The double-decrement corrupts     the encrypt_pending sentinel (initialized to 1), making tls_encrypt_async_wait() permanently skip the wait     for pending async callbacks. A subsequent sendmsg can then free the tls_rec via bpf_exec_tx_verdict()     while a cryptd callback is still pending, resulting in a use-after-free when the callback fires on the     freed record. Fix this by skipping the synchronous cleanup when the -EBUSY async wait returns an error,     since the callback has already handled encrypt_pending and sge restoration. (CVE-2026-31533)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31533

critical Nessus Plugin ID 310043

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 May 3, 2026, 4:59 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-31533, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.6 May 2, 2026, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.5 Apr 28, 2026, 1:11 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604281311
Version 1.4 Apr 28, 2026, 8:33 AM CVSS metrics ("CVSSv3 score" set to 9.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604280833
Version 1.3 Apr 25, 2026, 4:14 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604251614
Version 1.2 Apr 25, 2026, 1:42 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604250142
Version 1.1 Apr 24, 2026, 7:33 AM New Plugin Feed: 202604240733