The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the     supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address     spaces. With SMM, a GFN can therefore be write-tracked in one address space and appear untracked through     the other. Check the supplied slot first, then the slot for the other address space. This ensures all     callers honor write tracking regardless of the active address space. In particular, it prevents     mmu_try_to_unsync_pages() from marking an upper-level shadow page unsync and eventually triggering the BUG     in pte_list_remove(). [invert direction of the conditional. - Paolo] (CVE-2026-98164)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98164

medium Nessus Plugin ID 351189

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.1

Version 1.11 Nov 9, 2026, 3:50 PM CVSS metrics ("CVSSv2 score" set to 4.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202611091550
Version 1.10 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.9 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 6.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.8 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 4.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202611051743
Version 1.7 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 6.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.6 Oct 26, 2026, 2:57 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202610261457
Version 1.5 Oct 24, 2026, 2:50 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610240250
Version 1.1 Sep 30, 2026, 1:44 AM New Plugin Feed: 202609300144