The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache     maintenance on the source VM during intra-host migration to ensure no stale data is left in CPU caches     after the VM is destroyed. Because the source VM is converted to a non-SEV VM, KVM's memory reclaim     flows won't trigger cache maintenance, e.g. when all guest memory is reclaimed in response to detaching     from the mmu_notifier. Note, relying on the destination VM to do cache maintenance isn't an option as KVM     doesn't require identical guest memory configurations, i.e. the source VM may have access to memory that     the destination VM does not. Enforcing equivalent memory configurations is infeasible, as it would require     a *deep* comparison of memslots, e.g. to verify that not only are the memslot identical, but what the     memslots point at is also identical. (CVE-2026-98471)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98471

high Nessus Plugin ID 367167

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 5.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.8 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 6.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:C/A:C") Plugin Feed: 202611051743
Version 1.7 Nov 4, 2026, 12:13 PM Plugin metadata CVSS metrics ("CVSSv2 score" set to 5.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin Feed: 202611041213
Version 1.6 Oct 26, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202610260843
Version 1.5 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.3 Oct 20, 2026, 5:14 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610201714
Version 1.2 Oct 20, 2026, 8:26 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-98471, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200826
Version 1.1 Oct 19, 2026, 1:51 AM New Plugin Feed: 202610190151