The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Make post-verification instruction rewrites killable After do_check() returns, the verifier runs     several instruction rewrite passes. Some of them patch or remove one instruction at a time. Each operation     moves the remaining instruction and auxiliary-data arrays and adjusts all branch offsets, making the     overall work quadratic in the program length. A privileged loader can submit 131072 unconditional jumps by     zero followed by a valid return. Verification finishes quickly, but bpf_opt_remove_nops() then spends a     long time removing each jump separately. Since this post-verification work neither checks for signals nor     reschedules, a pending SIGKILL cannot terminate the task until the rewrite finishes. Make     bpf_patch_insn_data() and verifier_remove_insns() common cancellation and rescheduling points. These     helpers run from BPF_PROG_LOAD process context, and bpf_patch_insn_data() can already sleep while     reallocating auxiliary data. Report interrupted constant blinding as -EINTR and propagate it through both     JIT paths, including kernels that permit interpreter fallback. Other blinding failures retain the existing     fallback behavior. This does not reduce the quadratic cost of the rewrite passes, but it makes the work     preemptible and allows a killed loader to be torn down promptly. (CVE-2026-98628)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98628

high Nessus Plugin ID 367019

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.6 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.5 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.4 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.2 Oct 20, 2026, 8:26 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv2 severity (based on CVE-2026-98628, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200826
Version 1.1 Oct 19, 2026, 1:51 AM New Plugin Feed: 202610190151