The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sched_ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid     kfuncs while being modified: the first enable publishes the global pointers before filling them,     ops.init_cids() overrides rewrite them in place, and re-enables rebuild them in place. A racing TRACING or     SYSCALL program can read unfilled entries, including uninitialized memory in the kmalloc'd tables, or torn     topo updates. Tie the tables' lifetimes to the root sched instead: each root enable builds a fresh set     privately and publishes the per-table __rcu globals once the layout is final, and root disable unpublishes     and RCU-frees the set. A non-NULL global is now always a fully built table which stays valid for the     reader's RCU read section, and lookups stay two loads. Kfuncs treat NULL as no-mapping, also after the     scheduler exits instead of reporting the stale last mapping. The cid kfuncs are available whether the root     scheduler is cid-form or cpu-form, the latter to allow gradual migration to cids. Every root therefore     builds and publishes a default mapping. Every reader must either be gated on scheduler liveness or NULL-     check inside an RCU read section. Fix the two kfuncs that were neither: scx_bpf_this_cid() read the table     with no RCU or preemption protection and scx_bpf_task_cid() relied on KF_RCU, which doesn't put a     sleepable program in an RCU read section. The hotplug callbacks are instead serialized by retiring the     tables inside the cpus_read_lock() section that clears scx_root. v2: Document why every root builds the     tables (desc + cid.c comment). (CVE-2026-98942)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98942

high Nessus Plugin ID 371492

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Nov 12, 2026, 7:08 AM Detection (updated detection logic) Plugin Feed: 202611120708
Version 1.2 Oct 27, 2026, 4:13 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610271613
Version 1.1 Oct 24, 2026, 2:50 AM New Plugin Feed: 202610240250