The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nfnetlink_queue: hold nfnl mutex in event notifier We must serialize the release notifier and     the config netlink function. A concurrent thread can issue close() which can call the release function     while unrelated socket processes UNBIND request for same portid: Oops: general protection fault, [..] RIP:
    0010:__instance_destroy+0x60/0x210 [nfnetlink_queue] Call Trace: nfqnl_recv_config+0x9b0/0xdc0     [nfnetlink_queue] nfnetlink_rcv_msg+0x7c2/0xeb0 ? __pfx_nfnetlink_rcv_msg+0x10/0x10 After this, parallel     UNBIND and URELEASE events are impossible. This change isn't nice, but its the shortest fix given     instances are not refcounted and the nfnetlink config callback drops the rcu read lock early due to need     for sleeping allocations. (CVE-2026-98624)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98624

medium Nessus Plugin ID 367688

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.7 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.6 Nov 6, 2026, 2:22 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.5 Nov 5, 2026, 10:52 AM Detection (updated detection logic) Plugin Feed: 202611051052
Version 1.4 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.3 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 score" set to 5.6. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-98624, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.1 Oct 20, 2026, 8:26 AM New Plugin Feed: 202610200826