The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of     shadow S2 structures until VM destruction We free the shadow S2 structures from     kvm_arch_flush_shadow_all(), which is a Bad Idea(tm). Freeing the page tables is fair game (this is what     this callback is for), but freeing the container that could still be referenced by another part of the     system is not great. Instead, grow separate destructors that gets called when we tear the VM down for     good. From there, we can nuke both the individual MMUs as well as the global array that points to them,     safe in the knowledge that the vcpus themselves have been destroyed already. (CVE-2026-98440)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98440

high Nessus Plugin ID 367308

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.7 Nov 5, 2026, 5:43 PM CVSS metrics ("CVSSv2 score" set to 6.0. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202611051743
Version 1.6 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.5 Oct 26, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 6.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202610260843
Version 1.4 Oct 24, 2026, 11:07 PM CVSS metrics ("CVSSv3 score" set to 7.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610242307
Version 1.3 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.2 Oct 20, 2026, 8:26 AM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) Plugin Feed: 202610200826
Version 1.1 Oct 19, 2026, 6:13 PM New Plugin Feed: 202610191813