The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when     checking hid_bpf_hw_request As reported by Sashiko: If a transport driver encounters a hardware error and     returns a negative error code such as -EPIPE, ret is implicitly promoted to size_t when compared against     size. This causes the negative error code to evaluate as a large positive number, making the (ret > size)     condition true. This silently converts the hardware error into a success return value and copies the     unmodified buffer back, which could leave BPF programs operating on uninitialized or stale data. Fix this     by casting size into ssize_t to return the actual negative error code. (CVE-2026-98860)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98860

medium Nessus Plugin ID 367579

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Nov 12, 2026, 7:08 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120708
Version 1.4 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.3 Oct 24, 2026, 10:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610241032
Version 1.2 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.1 Oct 20, 2026, 8:26 AM New Plugin Feed: 202610200826