The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: Fix dst leak for uncached routes. ip6_route_output_flags(), ip6_rt_put_flags(), and ip6_dst_check()     detect an uncached route by list_empty(&rt->dst.rt_uncached), which replaced the static DST_NOCACHE flag     check in commit a4c2fd7f7891 (net: remove DST_NOCACHE flag). When a device is unregistered,     rt6_uncached_list_flush_dev() unlinks uncached routes tied to the device from rt6_uncached_list.
    Previously, they were moved to another list with list_move() (__list_del_entry() + list_add()), and since     commit 98aa546af5e4 (inet: remove (struct uncached_list)->quarantine), the routes are just unlinked with     list_del_init(). If list_del_init() runs concurrently, list_empty() evaluates to true;
    ip6_route_output_flags() calls dst_hold_safe() incorrectly and ip6_rt_put_flags() skips ip6_rt_put(),     leaking dst, and thus dev tied via rt->from as well. The same race is partially fixed by commit     9a6f0c4d5796 (dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()). Let's check     rt6->dst.rt_uncached_list instead. Note that IPv4 does not have the same issue. (CVE-2026-98596)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98596

medium Nessus Plugin ID 367692

Version 1.2

Version 1.1

Version 1.2 Oct 20, 2026, 12:55 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610201255
Version 1.1 Oct 20, 2026, 8:26 AM New Plugin Feed: 202610200826