The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library     (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN     in DT_RPATH for setuid/setgid (AT_SECURE) programs, glibc validates the lexically normalized search path     against the trusted directories but then opens the raw, un-normalized path. On systems where the Linux     fs.protected_hardlinks sysctl is disabled, a local attacker who hard-links such a program into an     attacker-controlled directory and wins a race to replace an intermediate path component with a symbolic     link can direct the loader outside the trusted directory, causing it to load an attacker-controlled shared     object and execute arbitrary code with the elevated privileges of the program. Exploitation requires an     installed setuid or setgid binary whose DT_RPATH uses $ORIGIN followed by .. traversal that normalizes     into a trusted directory, and the ability to hard-link that binary and win the race by swapping a path     component for a symbolic link. Major Linux-based OS distributions ship with fs.protected_hardlinks enabled     by default and mitigate the vulnerability. (CVE-2026-86805)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-86805

medium Nessus Plugin ID 349177

Version 1.7

Version 1.6

Version 1.1

Version 1.7 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 5.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:P") Plugin Feed: 202610121219
Version 1.6 Oct 11, 2026, 12:37 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610111237
Version 1.1 Sep 23, 2026, 1:21 PM New Plugin Feed: 202609231321