The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: spacemit: clear TX descriptor on fragment mapping failure emac_tx_mem_map() writes TX_DESC_0_OWN into     the ring descriptor for every slot beyond old_head as soon as that slot's memset()'d local copy is     committed with *tx_desc_addr = tx_desc, i.e. before the buffers for that slot have necessarily all been     mapped successfully. If emac_tx_map_frag() then fails on a later fragment, the err_free_skb path calls     emac_free_tx_buf() to unmap and drop the skb, but leaves the already-written descriptor memory untouched,     and tx_ring->head is never advanced past old_head (the tx_ring->head = head store is skipped by the     goto). So a slot between old_head and the rolled-back head can be left with TX_DESC_0_OWN set and     buffer_addr_{1,2} pointing at DMA mappings that emac_free_tx_buf() just tore down, while software     considers that slot free again. The next successful emac_tx_mem_map() call only rebuilds old_head itself;
    if the DMA engine auto-advances into the following descriptor once it finishes old_head's packet, it will     fetch that stale, already-unmapped address. emac_tx_clean_desc() already treats emac_free_tx_buf() and     clearing the descriptor as a pair when reclaiming completed descriptors; do the same in the mapping     failure path. (CVE-2026-98592)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98592

high Nessus Plugin ID 367653

Version 1.2

Version 1.1

Version 1.2 Oct 20, 2026, 12:55 PM Plugin metadata Detection (updated detection logic) CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202610201255
Version 1.1 Oct 20, 2026, 8:26 AM New Plugin Feed: 202610200826