The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sctp: avoid livelock while updating retransmit path sctp_assoc_update_retran_path() can loop forever when     every remaining transport, including retran_path, is SCTP_UNCONFIRMED: the state check runs before the     wraparound test, so the loop cannot observe that it has completed a full pass. Fix this by considering a     transport only when it is not UNCONFIRMED, then checking whether the walk has returned to retran_path.
    This makes the full-pass termination independent of the transport state while preserving the existing     fallback selection semantics. Also restore the NULL guard around the retran_path assignment. In the all-     UNCONFIRMED case there is no eligible replacement transport, and installing NULL would leave later     retransmit-path users and the debug print with a NULL path. (CVE-2026-98614)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98614

medium Nessus Plugin ID 367570

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.6 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.5 Nov 5, 2026, 10:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611051052
Version 1.4 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.3 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.1 Oct 20, 2026, 8:26 AM New Plugin Feed: 202610200826