The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially     processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this     cookie via COOKIE-ECHO, where the server unpacks it and reconstructs the original INIT chunk. When cookie     authentication is enabled, the cookie contents are protected against tampering, so reusing the unpacked     INIT without re-verification is safe. However, when cookie authentication is disabled, the reconstructed     INIT can no longer be trusted. In this case, the INIT must be explicitly validated after unpacking to     avoid processing potentially tampered data. Add sctp_verify_init() checks after cookie unpacking in     COOKIE-ECHO processing paths (sctp_sf_do_5_1D_ce() and sctp_sf_do_5_2_4_dupcook()) when cookie_auth_enable     is disabled. On failure, the new association is freed and the packet is discarded. Also tighten cookie     validation in sctp_unpack_cookie() by verifying the embedded chunk type is SCTP_CID_INIT before treating     it as an INIT chunk. Finally, update sctp_verify_init() to validate parameter bounds using the actual     embedded INIT length instead of chunk->chunk_end, since the INIT stored in COOKIE-ECHO may not span the     entire chunk buffer. (CVE-2026-72398)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72398

critical Nessus Plugin ID 335529

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202609280804
Version 1.12 Sep 25, 2026, 12:17 PM CVSS metrics ("CVSSv2 score" set to 9.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609251217
Version 1.11 Sep 22, 2026, 8:27 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202609220827
Version 1.10 Sep 21, 2026, 8:44 PM CVSS metrics ("CVSSv2 score" set to 9.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin Feed: 202609212044
Version 1.9 Sep 4, 2026, 12:58 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202609041258
Version 1.8 Sep 3, 2026, 7:44 AM CVSS metrics ("CVSSv2 score" set to 9.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609030744
Version 1.7 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202608281216
Version 1.6 Aug 28, 2026, 2:04 AM CVSS metrics ("CVSSv2 score" set to 9.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.5 Aug 21, 2026, 11:26 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202608212326
Version 1.4 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.3 Aug 19, 2026, 10:20 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608192220
Version 1.2 Aug 19, 2026, 6:09 AM CVSS metrics ("CVSSv2 score" set to 9.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608190609
Version 1.1 Aug 15, 2026, 5:20 PM New Plugin Feed: 202608151720