The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued     fragments and uses it to validate a fragment chain before reassembly. That accounting currently allows the     accumulated fragment length to be truncated during updates. As a result, malformed fragment chains can     bypass the intended validation and drive reassembly with inconsistent length state, leading to a local     denial of service. Fix the accounting by storing the accumulated length in a length-typed field and     rejecting update overflows before the existing validation logic runs. The fix was verified against the     original reproducer and against valid fragment reassembly paths. (CVE-2026-52914)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-52914

critical Nessus Plugin ID 322516

Version 1.37