The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing     with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPF_F_CPU or     BPF_F_ALL_CPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is     sized as: round_up(value_size, 8) * num_possible_cpus() The update paths iterate over possible CPUs, but     use the logical CPU ID to calculate the source offset: value + size * cpu This only works when possible     CPU IDs are contiguous starting at zero. For example, with a possible CPU mask of 0,2-3, the buffer     contains three slots corresponding to CPUs 0, 2, and 3. CPU2 is therefore expected to use slot 1 and CPU3     slot 2. Instead, the current code uses slots 2 and 3 respectively, causing incorrect per-CPU values and an     out-of-bounds read from the update buffer for CPU3. The corresponding lookup paths already use a dense     offset while iterating over possible CPUs. Do the same for the array, hash, and cgroup storage update     paths, advancing the source offset once for each possible CPU. BPF_F_ALL_CPUS continues to use the same     value for every CPU. (CVE-2026-98149)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98149

high Nessus Plugin ID 350565

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.6 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202611051743
Version 1.5 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.4 Oct 22, 2026, 10:08 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202610221008
Version 1.3 Oct 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021807
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230