The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: slab: fix kmalloc_nolock() context     check for PREEMPT_RT On PREEMPT_RT kernels, local_lock becomes a sleeping lock. The current check in     kmalloc_nolock() only verifies we're not in NMI or hard IRQ context, but misses the case where preemption     is disabled. When a BPF program runs from a tracepoint with preemption disabled (preempt_count > 0),     kmalloc_nolock() proceeds to call local_lock_irqsave() which attempts to acquire a sleeping lock,     triggering: BUG: sleeping function called from invalid context in_atomic(): 1, irqs_disabled(): 0,     non_block: 0, pid: 6128 preempt_count: 2, expected: 0 Fix this by checking !preemptible() on PREEMPT_RT,     which directly expresses the constraint that we cannot take a sleeping lock when preemption is disabled.
    This encompasses the previous checks for NMI and hard IRQ contexts while also catching cases where     preemption is disabled. (CVE-2026-23134)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23134

medium Nessus Plugin ID 299326

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Mar 19, 2026, 12:10 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202603191210
Version 1.2 Feb 24, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602240612
Version 1.1 Feb 18, 2026, 9:24 AM New Plugin Feed: 202602180924