The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: cttimeout: prevent UAF during module unload nf_ct_set_timeout() protects the timeout hook     dereference and policy lookup with rcu_read_lock(). cttimeout_exit(), however, unregisters the per-net     operations before it clears the hook. This allows the following interleaving: CPU 0 CPU 1 cttimeout_exit()     nf_ct_set_timeout() unregister_pernet_subsys() rcu_read_lock() kfree(pernet) h = nf_ct_timeout_hook     h->timeout_find_get() nfct_timeout_pernet() The hook still points to ctnl_timeout_find_get() when CPU 1     looks up the already freed per-net timeout list. KASAN reported: BUG: KASAN: slab-use-after-free in     ctnl_timeout_find_get Read of size 8 by task poc/90 Call Trace: ctnl_timeout_find_get+0x271/0x2a0     [nfnetlink_cttimeout] nf_ct_set_timeout+0x7b/0x3c0 xt_ct_tg_check+0x724/0xb20 xt_check_target+0x234/0xa90     do_ipt_set_ctl+0x570/0x1270 Allocated by task 89: __kmalloc_noprof+0x16e/0x460 ops_init+0x6d/0x420     register_pernet_operations+0x2f6/0x670 Freed by task 91: kfree+0x131/0x390 ops_undo_list+0x3d4/0x730     unregister_pernet_operations+0x232/0x490 unregister_pernet_subsys+0x1c/0x30 cttimeout_exit+0x52/0x970     [nfnetlink_cttimeout] Clear the hook and wait for existing readers before unregistering the per-net     operations. This blocks new policy lookups and ensures readers that observed the hook finish before the     per-net storage is freed. (CVE-2026-97609)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97609

high Nessus Plugin ID 350352

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.14 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.13 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 6.0. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202611051743
Version 1.12 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.11 Nov 3, 2026, 10:56 AM CVSS metrics ("CVSSv2 score" set to 6.0. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202611031056
Version 1.10 Oct 31, 2026, 5:30 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610310530
Version 1.9 Oct 22, 2026, 10:08 AM CVSS metrics ("CVSSv2 score" set to 6.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202610221008
Version 1.8 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.5 Oct 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021807
Version 1.3 Sep 30, 2026, 1:44 AM Plugin metadata Detection (updated detection logic) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv2 score" set to 4.9) Plugin Feed: 202609300144
Version 1.2 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 6.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202609280804
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230