An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nfnetlink_osf: validate individual option lengths in fingerprints nfnl_osf_add_callback() validates     opt_num bounds and string NUL-termination but does not check individual option length fields. A zero-     length option causes nf_osf_match_one() to enter the option matching loop even when foptsize sums to zero,     which matches packets with no TCP options where ctx->optp is NULL: Oops: general protection fault KASAN:
    null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:nf_osf_match_one     (net/netfilter/nfnetlink_osf.c:98) Call Trace: nf_osf_match (net/netfilter/nfnetlink_osf.c:227)     xt_osf_match_packet (net/netfilter/xt_osf.c:32) ipt_do_table (net/ipv4/netfilter/ip_tables.c:293)     nf_hook_slow (net/netfilter/core.c:623) ip_local_deliver (net/ipv4/ip_input.c:262) ip_rcv     (net/ipv4/ip_input.c:573) Additionally, an MSS option (kind=2) with length < 4 causes out-of-bounds reads     when nf_osf_match_one() unconditionally accesses optp[2] and optp[3] for MSS value extraction. While RFC     9293 section 3.2 specifies that the MSS option is always exactly 4 bytes (Kind=2, Length=4), the check     uses < 4 rather than != 4 because lengths greater than 4 do not cause memory safety issues -- the     buffer is guaranteed to be at least foptsize bytes by the ctx->optsize == foptsize check. Reject     fingerprints where any option has zero length, or where an MSS option has length less than 4, at add time     rather than trusting these values in the packet matching hot path. (CVE-2026-23397)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
310098	Photon OS 4.0: Linux PHSA-2026-4.0-1002	Nessus	PhotonOS Local Security Checks	4/24/2026	4/27/2026	high
306005	Photon OS 5.0: Linux PHSA-2026-5.0-0813	Nessus	PhotonOS Local Security Checks	4/11/2026	4/27/2026	high
303885	Linux Distros Unpatched Vulnerability : CVE-2026-23397	Nessus	Misc.	3/26/2026	4/4/2026	medium

Detections

Analytics

Plugins Search

high

high

medium