The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in     the POSIX CPU timer code: Commit bf635681c906 converted cpu_timer::firing from a tristate value to a     boolean. This lost the distinction between not owned by the firing list and still owned, but delivery     was canceled. The resulting race is: expiry handler timer_settime() timer_delete() --------------
    --------------- -------------- collect timer onto private firing list firing = true observes firing = true     firing = false return TIMER_RETRY wait for handler observes firing = false finish deletion unhash and free     timer resume list traversal read freed elist.next -> UAF The firing bit is clearly the wrong indicator     since that commit. Check whether the timer is queued on the expiry list or not instead. If it is queued     clear the firing bit to prevent signal delivery as before and return TIMER_RETRY so the caller unlocks the     timer which allows the expiry code to make progress and remove it from the list. (CVE-2026-98258)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98258

high Nessus Plugin ID 364240

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610121219
Version 1.3 Oct 11, 2026, 2:49 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610110249
Version 1.2 Oct 9, 2026, 2:01 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") New Plugin Feed: 202610091401