The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: ISO: release unused CIS holds after channel attach hci_bind_cis() and hci_connect_cis() return     one hci_conn hold for the ISO layer. A new channel association consumes that hold, which is eventually     released by iso_conn_free(). There are two cases where iso_chan_add() does not create an association: it     returns success when the socket is already attached to the same iso_conn, and it returns -EBUSY when     another socket is attached. The hold returned for the current call is unused in both cases. This occurs     when deferred setup calls iso_connect_cis() again for its existing socket, or when another socket attempts     to reuse the CIS. Detect the idempotent case while the connection is locked and release the unused hold     after iso_chan_add(). Also release it on -EBUSY. Do not drop it for other errors: a newly allocated     iso_conn releases the transferred hold when its last temporary reference is put. (CVE-2026-98458)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98458

medium Nessus Plugin ID 367349

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.7 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.6 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.5 Oct 31, 2026, 12:23 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610311223
Version 1.4 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.3 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.2 Oct 20, 2026, 8:26 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200826
Version 1.1 Oct 20, 2026, 4:30 AM New Plugin Feed: 202610200430