The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - linkwatch: use __dev_put() in callers to prevent UAF After linkwatch_do_dev() calls __dev_put() to release     the linkwatch reference, the device refcount may drop to 1. At this point, netdev_run_todo() can proceed     (since linkwatch_sync_dev() sees an empty list and returns without blocking), wait for the refcount to     become 1 via netdev_wait_allrefs_any(), and then free the device via kobject_put(). This creates a use-     after-free when __linkwatch_run_queue() tries to call netdev_unlock_ops() on the already-freed device.
    Note that adding netdev_lock_ops()/netdev_unlock_ops() pair in netdev_run_todo() before kobject_put()     would not work, because netdev_lock_ops() is conditional - it only locks when netdev_need_ops_lock()     returns true. If the device doesn't require ops_lock, linkwatch won't hold any lock, and netdev_run_todo()     acquiring the lock won't provide synchronization. Fix this by moving __dev_put() from linkwatch_do_dev()     to its callers. The device reference logically pairs with de-listing the device, so it's reasonable for     the caller that did the de-listing to release it. This allows placing __dev_put() after all device     accesses are complete, preventing UAF. The bug can be reproduced by adding mdelay(2000) after     linkwatch_do_dev() in __linkwatch_run_queue(), then running: ip tuntap add mode tun name tun_test ip link     set tun_test up ip link set tun_test carrier off ip link set tun_test carrier on sleep 0.5 ip tuntap del     mode tun name tun_test KASAN report: ==================================================================     BUG: KASAN: use-after-free in netdev_need_ops_lock include/net/netdev_lock.h:33 [inline] BUG: KASAN: use-     after-free in netdev_unlock_ops include/net/netdev_lock.h:47 [inline] BUG: KASAN: use-after-free in
    __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245 Read of size 8 at addr ffff88804de5c008 by     task kworker/u32:10/8123 CPU: 0 UID: 0 PID: 8123 Comm: kworker/u32:10 Not tainted syzkaller #0     PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014     Workqueue: events_unbound linkwatch_event Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline]     dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline]     print_report+0x156/0x4c9 mm/kasan/report.c:482 kasan_report+0xdf/0x1a0 mm/kasan/report.c:595     netdev_need_ops_lock include/net/netdev_lock.h:33 [inline] netdev_unlock_ops include/net/netdev_lock.h:47     [inline] __linkwatch_run_queue+0x865/0x8a0 net/core/link_watch.c:245 linkwatch_event+0x8f/0xc0     net/core/link_watch.c:304 process_one_work+0x9c2/0x1840 kernel/workqueue.c:3257 process_scheduled_works     kernel/workqueue.c:3340 [inline] worker_thread+0x5da/0xe40 kernel/workqueue.c:3421 kthread+0x3b3/0x730     kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30     arch/x86/entry/entry_64.S:246 </TASK> ==================================================================     (CVE-2026-23192)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23192

high Nessus Plugin ID 299108

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Mar 23, 2026, 11:56 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-23192, severity decreased from "High" to "Medium") Plugin Feed: 202603231156
Version 1.8 Mar 20, 2026, 2:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603200256
Version 1.7 Mar 10, 2026, 1:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603100156
Version 1.6 Feb 24, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602240612
Version 1.4 Feb 23, 2026, 1:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602231338
Version 1.3 Feb 18, 2026, 9:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602180924
Version 1.2 Feb 17, 2026, 9:07 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602170907
Version 1.1 Feb 15, 2026, 7:08 AM New Plugin Feed: 202602150708