The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-controlled     priv->len to nft_parse_register_store(), which marks that many bytes in the register bitmap as     initialized. However, when NFT_EXTHDR_F_PRESENT is set, the eval paths write only 1 byte (nft_reg_store8)     or 4 bytes (*dest = 0 on TCP/DCCP error path). When len > 4, registers beyond the first are never written,     retaining uninitialized stack data from nft_regs. Bail out if userspace requests too much data when     F_PRESENT is set. (CVE-2026-53218)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53218

medium Nessus Plugin ID 323385

Version 1.1