The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes     into the head before calling eth_type_trans(). pull_to is the length of the first RX slot, capped at     RX_COPY_THRESHOLD, and that length comes from the backend. Nothing checks it against ETH_HLEN. If the     first slot is shorter than ETH_HLEN and more slots follow, the head ends up shorter than an Ethernet     header while skb->len is longer, and eth_type_trans() BUG()s in __skb_pull(). If the whole packet is     shorter than ETH_HLEN, eth_type_trans() reads the header past the end of the data instead. Pull at least     ETH_HLEN, and drop the packet if that fails, which also drops packets too short to hold an Ethernet     header. This also checks the return value of the pull, which was ignored. (CVE-2026-98375)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98375

medium Nessus Plugin ID 364519

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.6 Oct 28, 2026, 8:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610280856
Version 1.5 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610180528
Version 1.4 Oct 17, 2026, 4:43 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610170443
Version 1.3 Oct 14, 2026, 10:44 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610142244
Version 1.2 Oct 11, 2026, 2:49 AM CVSS metrics ("CVSSv2 score" set to 6.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:A/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-98375, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610110249
Version 1.1 Oct 10, 2026, 5:24 AM New Plugin Feed: 202610100524