The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When     building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg.
    Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field.
    The fix simply zeroes tcm_info alongside the other fields that are already initialized. (CVE-2026-43035)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43035

high Nessus Plugin ID 311611

Version 1.2

Version 1.1

Version 1.2 May 3, 2026, 4:59 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-43035, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.1 May 2, 2026, 11:12 PM New Plugin Feed: 202605022312