In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A pending interrupt can invoke the handler while these locks are uninitialized. Initialize both locks before requesting the IRQ so the handler always sees valid lock state.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146650 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ALSA: harmony: initialize locks before requesting IRQ

    snd_harmony_create() registers the IRQ before initializing h->lock and     h->mixer_lock. A pending interrupt can invoke the handler while these     locks are uninitialized.

    Initialize both locks before requesting the IRQ so the handler always     sees valid lock state.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before     requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A     pending interrupt can invoke the handler while these locks are uninitialized. Initialize both locks before     requesting the IRQ so the handler always sees valid lock state. (CVE-2026-89980)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
373208	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146650)	Nessus	Unity Linux Local Security Checks	Local	high
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
346577	Linux Distros Unpatched Vulnerability : CVE-2026-89980	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-89980

high

Tenable Plugins

high

high

high

high

high