The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After     cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled     from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may     dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close()     tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED,     &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask);
    cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent     this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().
    (CVE-2026-23240)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23240

medium Nessus Plugin ID 301793

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Mar 26, 2026, 6:10 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202603261810
Version 1.6 Mar 19, 2026, 12:10 PM Detection (updated detection logic) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 6.9) Plugin Feed: 202603191210
Version 1.5 Mar 14, 2026, 2:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603140209
Version 1.4 Mar 13, 2026, 2:54 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202603131454
Version 1.3 Mar 13, 2026, 12:55 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202603130055
Version 1.2 Mar 12, 2026, 10:32 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 4.7) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H") Detection (updated detection logic) CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin Feed: 202603121032
Version 1.1 Mar 11, 2026, 10:59 PM New Plugin Feed: 202603112259