The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot     generation so that a memslot update invalidates cached MMIO information. Both the fill and validation     paths use kvm_memslots(), which unconditionally selects address space 0, even when the vCPU is running in     SMM and using address space 1. Commit 56f17dd3fbc4 (kvm: x86: fix stale mmio cache bug) added the     memslot generation to the cache key so that a memslot update could not leave a stale entry valid. When     commit 699023e23965 (KVM: x86: add SMM to the MMU role, support SMRAM address space) added the SMM     address space, these helpers were not converted to use the active memslots. Consequently, an update to the     SMM memslots can leave an entry from the old SMM address space apparently valid after the vCPU returns to     the normal address space. A guest can then cause an access to valid RAM at the same GFN to be returned to     userspace as KVM_EXIT_MMIO. Completing that exit through the VMM's RAM address space writes the backing     page without going through KVM's write-tracking path. If the page backs a nested EPT table, KVM can     continue using shadow translations derived from the old contents. The WARN_ON_ONCE() in     kvm_mmu_write_protect_fault() catches this invalid cache and memslot combination. Use the vCPU's active     memslots when caching and validating the entry. Memslot generations are unique across address spaces, so     the generation also distinguishes the normal and SMM views. This matches the MMIO SPTE cache, which     already uses kvm_vcpu_memslots(). On an unpatched current-mainline kernel, a regression test that fills     the cache in SMM and updates only the SMM memslots fails the intended RAM write and triggers the     kvm_mmu_write_protect_fault() warning. With this change, the same test completes the RAM write without a     warning. The x86/smm_test, set_memory_region_test, and memslot_modification_stress_test selftests also     pass. (CVE-2026-99082)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-99082

high Nessus Plugin ID 371494

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.12 Nov 12, 2026, 7:08 AM CVSS metrics ("CVSSv2 score" set to 6.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120708
Version 1.11 Nov 9, 2026, 3:50 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202611091550
Version 1.10 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin Feed: 202611071050
Version 1.9 Nov 6, 2026, 2:22 PM CVSS metrics ("CVSSv2 score" set to 6.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.8 Nov 4, 2026, 12:13 PM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202611041213
Version 1.6 Oct 28, 2026, 8:56 AM CVSS metrics ("CVSSv2 score" set to 6.8. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610280856
Version 1.5 Oct 27, 2026, 4:13 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610271613
Version 1.4 Oct 27, 2026, 9:59 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610270959
Version 1.3 Oct 27, 2026, 3:42 AM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610270342
Version 1.2 Oct 26, 2026, 8:43 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-99082, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610260843
Version 1.1 Oct 24, 2026, 2:50 AM New Plugin Feed: 202610240250