The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS Blamed commits forgot that vxlan/geneve     use udp_tunnel[6]_xmit_skb() which call iptunnel_xmit_stats(). iptunnel_xmit_stats() was assuming tunnels     were only using NETDEV_PCPU_STAT_TSTATS. @syncp offset in pcpu_sw_netstats and pcpu_dstats is different.
    32bit kernels would either have corruptions or freezes if the syncp sequence was overwritten. This patch     also moves pcpu_stat_type closer to dev->{t,d}stats to avoid a potential cache line miss since     iptunnel_xmit_stats() needs to read it. (CVE-2026-23459)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	10/8/2026	10/8/2026	high
305173	Linux Distros Unpatched Vulnerability : CVE-2026-23459	Nessus	Misc.	4/7/2026	10/21/2026	high

Detections

Analytics

Plugins Search

high

high