The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tipc: fix NULL deref in tipc_named_node_up() on empty publication list User-space applications can bind a     large number of service addresses to one or more sockets. Each binding of a local-scope service address     inserts one entry (publication) into the TIPC name table. If the number of these publications exceeds     TIPC_MAX_PUBL (65535), protocol service types (such as node state and link state) are no longer inserted     into the name table. This causes two issues: 1. User-space applications subscribing to node or link     up/down events stop receiving notifications. 2. A NULL pointer dereference can occur: BUG: kernel NULL     pointer dereference, address: 00000000000000d0 ... CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted     7.2.0-rc4-default+ #5 PREEMPT(full) ... RIP: 0010:tipc_named_node_up (./include/linux/skbuff.h:2251     net/tipc/name_distr.c:195 net/tipc/name_distr.c:221) ... Call Trace: <IRQ> tipc_node_write_unlock     (net/tipc/node.c:428) tipc_rcv (net/tipc/node.c:934 net/tipc/node.c:2189) tipc_udp_recv     (net/tipc/udp_media.c:389) Thread 1 (tipc_net_finalize) | Thread 2 (named_distribute)
    -----------------------------|----------------------------- | ... | list_for_each_entry(publ, pls,     binding_node) { | ... | __skb_queue_tail(list, skb); | ... | } | ... | hdr = buf_msg(skb_peek_tail(list));
    ... | tipc_nametbl_publish(); | If 'tipc_nametbl_publish()' (Thread 1) fails because the number of local     publications reaches TIPC_MAX_PUBL, list (Thread 2) will be empty. As a result, NULL is passed to     'buf_msg()', leading to a NULL pointer dereference. Fix these issues by allowing protocol service types     (node state, link state, and topology server) to be inserted into the name table unconditionally. This     ensures that users subscribing to these types always receive notifications. In addition, the maximum     number of local user publications is reduced to (TIPC_MAX_PUBL - 1). This ensures that the maximum bulk     size calculated in tipc_link_set_queue_limits() remains valid. (CVE-2026-98098)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98098

medium Nessus Plugin ID 350385

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.4

Version 1.2

Version 1.1

Version 1.11 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.10 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 4.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202611051743
Version 1.9 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.8 Oct 29, 2026, 3:00 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202610291500
Version 1.7 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P". "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-98098, severity decreased from "Medium" to "Low". based on CVE-2026-98098, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.4 Oct 2, 2026, 1:05 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021305
Version 1.2 Sep 30, 2026, 6:31 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-98098, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230