filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker following the stale read, an honest contender creates a live successor on the reused inode, and the successor's modification time is not newer than the saved observation, causing the live marker to be removed and two holders to be admitted. This issue is fixed in version 4.2.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a
    stale marker after an attacker frees its own marker following the stale read, an honest contender creates
    a live successor on the reused inode, and the successor's modification time is not newer than the saved
    observation, causing the live marker to be removed and two holders to be admitted. This issue is fixed in
    version 4.2.1. (CVE-2026-112935)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a     stale marker after an attacker frees its own marker following the stale read, an honest contender creates     a live successor on the reused inode, and the successor's modification time is not newer than the saved     observation, causing the live marker to be removed and two holders to be admitted. This issue is fixed in     version 4.2.1. (CVE-2026-112935)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478203	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
478203	Chainguard: multiple nemo-rl-cuda-13.0 packages: security update to 0.7.0-r20	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
477811	SCA: security update for filelock (GHSA-fq56-3cx3-fjxp)	Tenable Cloud Security	SCA Checks	Local	medium
477811	SCA: security update for filelock (GHSA-fq56-3cx3-fjxp)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
369007	Linux Distros Unpatched Vulnerability : CVE-2026-112935	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-112935

medium

Tenable Plugins

medium

medium

medium

medium

medium