An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv4: do not warn on route notification size race Commit 680aea08e78c (net: ipv4: Emit notification when     fib hardware flags are changed) added asynchronous route notifications for hardware flag changes.
    fib_alias_hw_flags_set() sizes the skb with fib_nlmsg_size() and later fills it with fib_dump_info() while     holding only RCU. With nexthop compatibility mode enabled, a concurrent replacement can grow the group     between these independent snapshots. fib_dump_info() can then legitimately return -EMSGSIZE, so the     warning does not prove a sizing bug. Remove the warning. The existing error path still frees the skb and     reports the error to listeners. (CVE-2026-99071)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
373466	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3335)	Nessus	Amazon Linux Local Security Checks	10/29/2026	11/4/2026	medium
375086	Photon OS 5.0: Linux PHSA-2026-5.0-92-1044	Nessus	PhotonOS Local Security Checks	11/2/2026	11/2/2026	critical
371539	Linux Distros Unpatched Vulnerability : CVE-2026-99071	Nessus	Misc.	10/23/2026	11/11/2026	medium

Detections

Analytics

Plugins Search

medium

critical

medium