The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a two-byte PSM at     the start of the payload. l2cap_recv_frame() currently reads that PSM unconditionally after validating     only the outer L2CAP length. A malformed connectionless frame with a zero- or one-byte payload can     therefore make the parser read beyond the advertised skb payload and use tailroom bytes as part of the     PSM. A VHCI-backed QEMU reproducer injected a one-byte connectionless payload and reached the unchecked     read. Reject connectionless frames that cannot contain the PSM before reading or pulling it. This     preserves all valid connectionless frames while dropping only structurally incomplete packets.
    (CVE-2026-97408)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97408

medium Nessus Plugin ID 350000

Version 1.3