The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after     unregistering the hooks from error path, since a hook that already refers to this flowtable can be already     registered, exposing this flowtable to packet path and nfnetlink_hook control plane. This error path is     rare, it should only happen by reaching the maximum number hooks or by failing to set up to hardware     offload, just call synchronize_rcu(). There is a check for already used device hooks by different     flowtable that could result in EEXIST at this late stage. The hook parser can be updated to perform this     check earlier to this error path really becomes rarely exercised. Uncovered by KASAN reported as use-     after-free from nfnetlink_hook path when dumping hooks. (CVE-2026-23392)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23392

high Nessus Plugin ID 303665

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 May 3, 2026, 4:59 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
Version 1.5 May 2, 2026, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
Version 1.4 Apr 6, 2026, 3:39 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202604061539
Version 1.3 Apr 3, 2026, 8:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604030806
Version 1.2 Mar 28, 2026, 12:01 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 6.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H") CVSSv2 severity (based on CVE-2026-23392, severity increased from "Low" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202603281201
Version 1.1 Mar 26, 2026, 1:29 AM New Plugin Feed: 202603260129