The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - macsec: initialize SecY before registering the netdevice Creating a MACsec device with MAC offload over an     LRO-capable lower device triggers a warning in rtmsg_ifinfo_build_skb() when IPv4 forwarding is enabled by     default. register_netdevice() invokes inetdev_init(), which disables LRO and emits a NETDEV_FEAT_CHANGE     notification. This reaches macsec_fill_info() before macsec_add_dev() initializes the SecY. key_len is     still zero, so macsec_fill_info() returns -EMSGSIZE and trips the WARN_ON in rtmsg_ifinfo_build_skb(),     even though the skb has enough space. Even without the warning, notifications during registration can     report uninitialized SecY attributes, including the SCI. This ordering has existed since the driver was     introduced. Initialize the SecY and apply the new-link attributes before registration. Move MAC address     inheritance into macsec_newlink() so the SCI can also be initialized before registration-time     notifications report it. Move the per-CPU statistics and metadata destination allocation into ndo_init(),     and release partial allocations on failure. (CVE-2026-98929)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-98929

medium Nessus Plugin ID 371547

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Nov 12, 2026, 7:08 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120708
Version 1.6 Nov 7, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611071050
Version 1.5 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.4 Oct 29, 2026, 3:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610291500
Version 1.3 Oct 28, 2026, 8:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610280856
Version 1.2 Oct 27, 2026, 4:13 PM CVSS metrics ("CVSSv2 score" set to 5.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:C") CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-98929, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610271613
Version 1.1 Oct 24, 2026, 2:50 AM New Plugin Feed: 202610240250