The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport     header in iptunnel_pmtud_check_icmp() In some cases, iptunnel_pmtud_check_icmp() can be called while skb     transport header is not set. This triggers an out-of-bound access, because     (typeof(skb->transport_header))~0U is 65535. Access the icmp header based on IPv4 network header, after     making sure icmp->type is present in skb linear part. Note that iptunnel_pmtud_check_icmpv6()) is fine.
    (CVE-2026-63992)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-63992

critical Nessus Plugin ID 328291

Version 1.24