The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support     segmentation offload when the MSS is less than 224 bytes. Attempting to send such packets causes the     adapter to freeze, stopping all traffic until manually reset. Implement ndo_features_check to disable GSO     for packets with small MSS values. The network stack will perform software segmentation instead. The     224-byte minimum matches ibmvnic commit <f10b09ef687f> (ibmvnic: Enforce stronger sanity checks on GSO     packets) which uses the same physical adapters in SEA configurations. The issue occurs specifically when     the hardware attempts to perform segmentation (gso_segs > 1) with a small MSS. Single-segment GSO packets     (gso_segs == 1) do not trigger the problematic LSO code path and are transmitted normally without     segmentation. Add an ndo_features_check callback to disable GSO when MSS < 224 bytes. Also call     vlan_features_check() to ensure proper handling of VLAN packets, particularly QinQ (802.1ad)     configurations where the hardware parser may not support certain offload features. Validated using     iptables to force small MSS values. Without the fix, the adapter freezes. With the fix, packets are     segmented in software and transmission succeeds. Comprehensive regression testing completedd (MSS tests,     performance, stability). (CVE-2026-46273)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46273

high Nessus Plugin ID 318567

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Jun 23, 2026, 12:13 AM CVSS metrics ("CVSSv2 score" set to 6.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606230013
Version 1.4 Jun 9, 2026, 11:10 AM CVSS metrics ("CVSSv3 score" set to 8.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202606091110
Version 1.3 Jun 5, 2026, 7:05 AM Detection (updated detection logic) Plugin Feed: 202606050705
Version 1.2 Jun 5, 2026, 12:54 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606050054
Version 1.1 Jun 4, 2026, 6:01 AM New Plugin Feed: 202606040601