The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib_mad_complete_recv() initializes     mad_recv_wc->rmpp_list and then runs ib_mad_enforce_security() before linking recv_buf onto that list. On     failure it calls ib_free_recv_mad(), which only walks rmpp_list and frees the ib_mad_private of every     buffer found there. As the list is still empty at that point, nothing is freed at all. The caller cannot     clean up either: ib_mad_recv_done() sets recv to NULL right after ib_mad_complete_recv() returns, assuming     the MAD layer took ownership of the buffer. Every MAD that fails the PKey check therefore leaks one     ib_mad_private (about 300 bytes per IB port MAD, ~2K for OPA), and a remote node can trigger this     repeatedly by sending MADs with a wrong PKey. Link recv_buf onto rmpp_list right after the list is     initialized, so the error path has something to free. (CVE-2026-98354)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98354

high Nessus Plugin ID 363309

Version 1.3

Version 1.1

Version 1.3 Oct 24, 2026, 2:50 AM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-98354, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610240250
Version 1.1 Oct 6, 2026, 7:18 PM New Plugin Feed: 202610061918