The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC     6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, then pulls the old     header and pushes the new one plus the IPv6 header back. The recompressed header can be larger than the     received one when the swap reduces the common-prefix length the segments share with daddr (CmprI=0,     CmprE>0, seg[0][0] != daddr[0] gives the maximum +8 bytes). pskb_expand_head() was gated on segments_left     == 0, so on earlier segments the push consumed unchecked headroom. Once skb_push() leaves fewer than     skb->mac_len bytes in front of data, skb_mac_header_rebuild()'s call to: skb_set_mac_header(skb,
    -skb->mac_len); will store (data - head) - mac_len into the u16 mac_header field, which wraps to ~65530,     and the following memmove() writes mac_len bytes ~64KiB past skb->head. A single     AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two segment type-3 SRH (CmprI=0, CmprE=15) reaches     headroom 8 after one pass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv. Fix this by expanding the     head whenever the remaining room is less than the push size plus mac_len, and request that much extra so     the rebuilt MAC header fits afterwards. (CVE-2026-43501)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-43501

critical Nessus Plugin ID 316522

Version 1.8

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.8 Jun 23, 2026, 12:13 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.7 Jun 15, 2026, 7:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606151929
Version 1.6 Jun 4, 2026, 6:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606040601
Version 1.4 May 29, 2026, 5:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605291727
Version 1.3 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230