The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rhashtable: clear stale iter->p on table restart rhashtable_walk_start_check() has two restart paths when     resuming a walk. When iter->walker.tbl is valid, it re-validates iter->p against the table and sets     iter->p = NULL if the object is gone. When iter->walker.tbl is NULL (table was freed during resize), it     resets slot and skip but forgets to clear iter->p. rhashtable_walk_next() then dereferences the stale     iter->p, reading freed memory. This is a use-after-free. Any caller that does multi-fragment rhashtable     walks across walk_stop/walk_start boundaries is affected. Concrete cases include netlink_diag     (__netlink_diag_dump in net/netlink/diag.c) and TIPC (tipc_nl_sk_walk in net/tipc/socket.c). Crash stack     (netlink_diag): BUG: KASAN: slab-use-after-free in rhashtable_walk_next+0x365/0x3c0 Read of size 8 at addr     ffff88801a9d2438 (freed kmalloc-2k, offset 1080) Call Trace: rhashtable_walk_next+0x365/0x3c0     (lib/rhashtable.c:1016) __netlink_diag_dump+0x160/0x760 (net/netlink/diag.c:122)     netlink_diag_dump+0xc2/0x240 netlink_dump+0x5bc/0x1270 netlink_recvmsg+0x7a3/0x980     sock_recvmsg+0x1bc/0x200 __sys_recvfrom+0x1d4/0x2c0 (CVE-2026-64563)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64563

high Nessus Plugin ID 331894

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.10 Aug 26, 2026, 1:14 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608261314
Version 1.9 Aug 25, 2026, 9:17 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608252117
Version 1.8 Aug 21, 2026, 11:26 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-64563, severity increased from "Low" to "Medium") Plugin Feed: 202608212326
Version 1.7 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.6 Aug 14, 2026, 5:17 PM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P") CVSSv2 severity (based on CVE-2026-64563, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.5 Aug 10, 2026, 9:45 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-64563, severity increased from "Low" to "Medium") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202608100945
Version 1.4 Aug 7, 2026, 5:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608071710
Version 1.3 Aug 7, 2026, 7:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608070732
Version 1.2 Aug 5, 2026, 2:10 PM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-64563, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608051410
Version 1.1 Aug 4, 2026, 9:07 PM New Plugin Feed: 202608042107