The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id     dropped by collect_linked_regs() check_cond_jmp_op() copies the compared registers into     env->{false,true}_reg{1,2} before collect_linked_regs() runs and copies those snapshots back into both     branch states afterwards. collect_linked_regs() records at most LINKED_REGS_MAX members of a linked     registers group in the jump history and calls clear_scalar_id() for every member that does not fit. The     compared register is not exempt from that. As a consequence, sync_linked_regs() might adjust ranges for     more registers than bpf_bt_sync_linked_regs() can propagate precision to. Collect the linked registers     before the snapshots are taken instead. This might lead to some unnecessary clear_scalar_id's, but from     previous testing situations with many linked registers are extremely rare. (CVE-2026-98042)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98042

low Nessus Plugin ID 350649

Version 1.3

Version 1.1

Version 1.3 Oct 2, 2026, 6:07 PM CVSS metrics ("CVSSv3 score" set to 3.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N") CVSSv3 severity (based on None, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021807
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230