The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: sr: restore network header before routing and forwarding ipv6_srh_rcv() runs with skb->data at the     Segment Routing Header (SRH) while skb_network_header() points at the IPv6 header. When segments_left > 0,     ipv6_srh_rcv() previously restored the skb->data position by pushing sizeof(struct ipv6hdr), assuming the     SRH immediately followed the fixed IPv6 header. If another extension header (such as a Hop-by-Hop options     header) precedes the SRH, skb_network_offset() remained negative. This led to two problems: 1. During     ip6_route_input(), fib6_rules_early_flow_dissect() invokes __skb_flow_dissect() which passes the negative     skb_network_offset() to flow dissection, breaking BPF and C flow dissector logic. 2. If forwarded via     ip6_forward() or redirected via act_mirred, downstream handlers (like sch_fragment() or neighbour output)     pass the negative offset as an unsigned length, triggering OOB memcpy or buffer overflows. Fix this by     pushing -skb_network_offset(skb) before routing, ensuring skb_network_offset(skb) is 0 for route lookup /     flow dissection as well as downstream forwarding. On the loopback path, pull skb_transport_offset(skb) to     restore skb->data to the SRH before looping back. (CVE-2026-98096)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98096

high Nessus Plugin ID 350656

Version 1.6

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Oct 2, 2026, 6:07 PM CVSS metrics ("CVSSv2 score" set to 3.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:N/I:P/A:N") CVSSv2 severity (based on CVE-2026-98096, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021807
Version 1.3 Sep 30, 2026, 6:31 AM CVSS metrics ("CVSSv2 score" set to 3.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:N/I:P/A:N") CVSSv2 severity (based on CVE-2026-98096, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.2 Sep 28, 2026, 8:04 AM CVSS metrics ("CVSSv2 score" set to 7.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:N/C:N/I:C/A:C") CVSSv2 severity (based on CVE-2026-98096, severity increased from "Low" to "High") Plugin Feed: 202609280804
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230