The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After     cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled     from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may     dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close()     tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED,     &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask);
    cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent     this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().
    (CVE-2026-23240)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23240

critical Nessus Plugin ID 301793

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.10 May 20, 2026, 10:33 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.9 May 2, 2026, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.8 Apr 6, 2026, 3:39 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202604061539
Version 1.7 Mar 26, 2026, 6:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603261810
Version 1.6 Mar 19, 2026, 12:10 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin Feed: 202603191210
Version 1.5 Mar 14, 2026, 2:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603140209
Version 1.4 Mar 13, 2026, 2:54 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603131454
Version 1.3 Mar 13, 2026, 12:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603130055
Version 1.2 Mar 12, 2026, 10:32 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 4.7) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin Feed: 202603121032
Version 1.1 Mar 11, 2026, 10:59 PM New Plugin Feed: 202603112259