The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: qla2xxx: Skip vport under deletion in report ID acquisition qla24xx_report_id_acquisition() format-1     handling walks ha->vp_list under vport_slock, takes a vref_count on the matching vport and calls     qla_update_host_map() to register its port id. A vport teardown via qla24xx_vport_delete() sets     VPORT_DELETE, then qla24xx_disable_vp() removes the vport from the host_map btree and zeroes vha->d_id     (RESET_AL_PA). The vport is only unlinked from vp_list later, in qla24xx_deallocate_vp_id(), which clears     vp_map[idx] (RESET_VP_IDX) but does not touch host_map. In the window in between, report ID acquisition     can still find the vport on vp_list and call qla_update_host_map(); with d_id already zeroed it takes the     btree_insert32() path and re-inserts the dying vport into host_map. Nothing cleans that entry afterwards,     so once scsi_host_put() frees the vha a later host_map lookup dereferences freed memory. Skip a vport that     has VPORT_DELETE set before taking the reference, so it is neither re-registered nor scheduled for DPC re-     registration. This mirrors the existing guard in qla2x00_alert_all_vps(). (CVE-2026-97531)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97531

high Nessus Plugin ID 350340

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.15 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 6.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.14 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202611051743
Version 1.13 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 6.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.12 Oct 26, 2026, 2:57 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202610261457
Version 1.11 Oct 23, 2026, 11:36 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610231136
Version 1.10 Oct 22, 2026, 10:08 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202610221008
Version 1.9 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.6 Oct 2, 2026, 1:05 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202610021305
Version 1.4 Sep 30, 2026, 4:36 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202609301636
Version 1.3 Sep 29, 2026, 4:08 PM Plugin metadata Detection (updated detection logic) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 6.6) Plugin Feed: 202609291608
Version 1.2 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C") Plugin Feed: 202609280804
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230