The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most     two netns, dev_net(dev) and the sticky underlay netns vxlan->net. They differ once the device is created     in or moved to a netns other than the one the request runs in. The rtnl changelink path checks     CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in vxlan->net can rewrite a     vxlan device whose underlay lives in vxlan->net. vxlan_changelink() validates and applies the new     configuration against vxlan->net (vxlan_config_validate(vxlan->net, ...)) and can reopen the underlay     socket in that netns, so the same reasoning as the tunnel changelink series applies here. Gate     vxlan_changelink() with rtnl_dev_link_net_capable(), at the top of the op before any attribute is parsed,     matching ipgre_changelink() and the rest of the require CAP_NET_ADMIN in the device netns for changelink     series. Found by 0sec automated security-research tooling (https://0sec.ai). (CVE-2026-68432)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-68432

high Nessus Plugin ID 334896

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.11 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608281216
Version 1.10 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.9 Aug 21, 2026, 11:26 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608212326
Version 1.8 Aug 21, 2026, 7:41 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.7 Aug 17, 2026, 11:03 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202608171103
Version 1.6 Aug 15, 2026, 1:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608150104
Version 1.5 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.4 Aug 14, 2026, 7:05 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608140705
Version 1.3 Aug 13, 2026, 3:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608131517
Version 1.2 Aug 13, 2026, 12:31 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608130031
Version 1.1 Aug 12, 2026, 7:14 PM New Plugin Feed: 202608121914