The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In reset_per_cpu_data(), al is computed as:
    al = sizeof(struct net_dm_alert_msg); al += dm_hit_limit * sizeof(struct net_dm_drop_point); al +=     sizeof(struct nlattr); skb = genlmsg_new(al, GFP_KERNEL); ... nla = nla_reserve(skb, NLA_UNSPEC,     sizeof(struct net_dm_alert_msg)); ... msg = nla_data(nla); memset(msg, 0, al); Because al includes     sizeof(struct nlattr) (the 4-byte attribute header), genlmsg_new() allocates al bytes of tailroom starting     at nla. However, msg points to nla_data(nla), which is located sizeof(struct nlattr) bytes past nla.
    Calling memset(msg, 0, al) therefore writes al bytes starting from msg, exceeding the allocated buffer by     sizeof(struct nlattr) (4 bytes) and corrupting skb_shared_info. Fix this by letting al represent only the     payload length, allocating the skb with genlmsg_new(nla_total_size(al), GFP_KERNEL), and zeroing al bytes     from msg. (CVE-2026-98419)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98419

high Nessus Plugin ID 365949

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.8 Oct 26, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 6.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202610260843
Version 1.7 Oct 24, 2026, 11:07 PM CVSS metrics ("CVSSv3 score" set to 7.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610242307
Version 1.6 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.5 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610180528
Version 1.3 Oct 17, 2026, 4:43 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610170443
Version 1.2 Oct 16, 2026, 7:34 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-98419, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610161934
Version 1.1 Oct 15, 2026, 3:37 AM New Plugin Feed: 202610150337