The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig     failure: 1. we have a BSS connection 2. we have a NAN connection 3. FW error occurs 4. reconfig restores     the BSS connection 5. however, restoring the NAN connection fails due to a FW error. 6. erroneously,     ieee80211_handle_reconfig_failure is called and marks all interfaces as not-in-driver (will be fixed in a     different patch). 7. mac80211 frees the links of the BSS connection but doesn't tell the driver about     that, as it thinks that this vif is not in the driver. 8. in ieee80211_stop_device, *ALL* wiphy works are     getting flushed (erroneously?) 9. Therefore, async_handlers_wk is being executed, processing the     statistics notification that was received after we restored the BSS connection. 10. the notification     handler dereferences fw_id_to_bss_conf[id], which is now a dangling pointer, as mac80211 already freed     this link in (7). 11. On the first access to one of the links fields, we panic. While this can and should     be fixed by removing the call to ieee80211_handle_reconfig_failure in (6), it is also not a good idea to     carry and maybe handle notifications from a dead FW. We do purge the notifications when we stop the FW,     but in reconfig failure we stop the FW too late, after the notifications are processed. In addition,     async_handlers_wk can always be scheduled before the reconfig work. Purge the notifications immediately     when transport notifies about a nic error. (CVE-2026-97474)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97474

high Nessus Plugin ID 350033

Version 1.8

Version 1.7

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Oct 14, 2026, 9:52 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202610140952
Version 1.7 Oct 13, 2026, 2:52 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.5 Sep 30, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.4 Sep 29, 2026, 4:08 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609291608
Version 1.3 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202609280804
Version 1.2 Sep 25, 2026, 6:49 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.4) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-97474, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609251849
Version 1.1 Sep 25, 2026, 5:53 AM New Plugin Feed: 202609250553