The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-controlled     priv->len to nft_parse_register_store(), which marks that many bytes in the register bitmap as     initialized. However, when NFT_EXTHDR_F_PRESENT is set, the eval paths write only 1 byte (nft_reg_store8)     or 4 bytes (*dest = 0 on TCP/DCCP error path). When len > 4, registers beyond the first are never written,     retaining uninitialized stack data from nft_regs. Bail out if userspace requests too much data when     F_PRESENT is set. (CVE-2026-53218)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53218

medium Nessus Plugin ID 323385

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.6 Jul 8, 2026, 11:53 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-53218, severity increased from "Low" to "Medium") Plugin Feed: 202607081153
Version 1.5 Jul 7, 2026, 5:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607070547
Version 1.4 Jul 4, 2026, 4:43 PM CVSS metrics ("CVSSv2 score" set to 2.1. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.2 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421