The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() When a socket transmits a packet with     MCTP_TAG_PREALLOC set, mctp_lookup_prealloc_tag() iterates over the per-netns &mns->keys list and matches     netid, req_tag, peer_addr, and manual_alloc, without checking whether tmp->sk == &msk->sk. This allows any     MCTP socket in the same network namespace to use and consume another socket's preallocated tag. Iterate     the socket's own tag list (&msk->keys via sklist) instead of the namespace-wide &mns->keys list in     mctp_lookup_prealloc_tag(), ensuring that only tags allocated by msk are matched. Tested in QEMU against     Linux 7.3.0-rc3 by allocating a manual tag (0x18) on socket A via SIOCMCTPALLOCTAG for peer EID 9 and     sending a 4-byte message with MCTP_TAG_PREALLOC from socket B in the same network namespace. On the     unfixed kernel, sendto(sock_b) using socket A's preallocated tag succeeds (ret = 4); with this patch     applied, sendto(sock_b) fails with -ENOENT (errno = 2) while sendto(sock_a) succeeds (ret = 4).
    (CVE-2026-98525)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98525

high Nessus Plugin ID 367079

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.4 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.3 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.2 Oct 20, 2026, 8:26 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200826
Version 1.1 Oct 19, 2026, 1:51 AM New Plugin Feed: 202610190151