The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock Exact UNIX diag lookups hold a reference to the     socket, but not to u->path. Meanwhile, unix_release_sock() clears u->path under unix_state_lock() and     drops the path reference after unlocking. Read the inode and device numbers for UNIX_DIAG_VFS while     holding unix_state_lock(), then emit the netlink attribute after dropping the lock. This keeps the VFS     data stable while the reply is being built. (CVE-2026-31673)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-31673

high Nessus Plugin ID 310342

Version 1.3