The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls     metadata_dst_free() which directly kfree()s the metadata_dst, ignoring the dst_entry refcount. Packets     that took a reference via dst_hold() in nft_tunnel_obj_eval() and are still queued (e.g. in a netem qdisc)     are left with a dangling pointer. When these packets are eventually dequeued, dst_release() operates on     freed memory. Replace metadata_dst_free() with dst_release() so the metadata_dst is freed only after all     references are dropped. The dst subsystem already handles metadata_dst cleanup in dst_destroy() when     DST_METADATA is set. (CVE-2026-53212)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53212

high Nessus Plugin ID 323364

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.8 Aug 13, 2026, 10:20 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608131020
Version 1.7 Aug 1, 2026, 2:26 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202608010226
Version 1.6 Jul 25, 2026, 1:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607251306
Version 1.5 Jul 7, 2026, 5:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607070547
Version 1.4 Jul 4, 2026, 4:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.2 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421