The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bnxt_en: Fix RSS context delete logic We need to free the corresponding RSS context VNIC in FW everytime     an RSS context is deleted in driver. Commit 667ac333dbb7 added a check to delete the VNIC in FW only when     netif_running() is true to help delete RSS contexts with interface down. Having that condition will make     the driver leak VNICs in FW whenever close() happens with active RSS contexts. On the subsequent open(),     as part of RSS context restoration, we will end up trying to create extra VNICs for which we did not make     any reservation. FW can fail this request, thereby making us lose active RSS contexts. Suppose an RSS     context is deleted already and we try to process a delete request again, then the HWRM functions will     check for validity of the request and they simply return if the resource is already freed. So, even for     delete-when-down cases, netif_running() check is not necessary. Remove the netif_running() condition check     when deleting an RSS context. (CVE-2026-43260)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43260

high Nessus Plugin ID 312950

Version 1.9

Version 1.8

Version 1.7

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Jun 21, 2026, 11:53 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606211153
Version 1.8 May 29, 2026, 5:27 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202605291727
Version 1.7 May 25, 2026, 10:30 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202605252230
Version 1.4 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.3 May 11, 2026, 11:42 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv3 score" set to 7.8) Plugin Feed: 202605111142
Version 1.2 May 8, 2026, 1:55 AM Detection (updated detection logic) Plugin metadata CVSSv2 severity (based on CVE-2026-43260, severity decreased from "High" to "Medium") CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 6.6) Plugin Feed: 202605080155
Version 1.1 May 7, 2026, 1:46 PM New Plugin Feed: 202605071346