The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iio: light: gp2ap020a00f: drain irq_work after free_irq The threaded IRQ handler queues data->work through     irq_work_queue() so the trigger is polled from a per-CPU context. free_irq() does not flush an irq_work     the handler already queued, so after gp2ap020a00f_remove() returns that work may still run and call     iio_trigger_poll() on data->trig, which the devm cleanup has already freed, causing a use-after-free. Add     irq_work_sync(&data->work) after free_irq() in remove() and in the probe error path, mirroring commit     78601726d4a5 (iio: trigger: sysfs: fix use-after-free on remove). Found by an in-house static analysis     tool, confirmed by manual review. (CVE-2026-98662)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98662

high Nessus Plugin ID 367135

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.5 Nov 6, 2026, 2:22 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.4 Oct 31, 2026, 12:23 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610311223
Version 1.3 Oct 20, 2026, 12:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610201255
Version 1.2 Oct 20, 2026, 8:26 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200826
Version 1.1 Oct 19, 2026, 1:51 AM New Plugin Feed: 202610190151