The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to     i_private data on its end after removing the original entry from the file system. However the inode can     aand does live beyond that point and it is possible that some of the fs call back functions will be     invoked after the reference has been put, which results in a race between freeing the data and accessing     it through the fs. While the rawdata/loaddata is the most likely candidate to fail the race, as it has the     fewest references. If properly crafted it might be possible to trigger a race for the other types stored     in i_private. Fix this by moving the put of i_private referenced data to the correct place which is during     inode eviction. (CVE-2026-23411)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23411

high Nessus Plugin ID 306142

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 May 1, 2026, 7:22 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605010722
Version 1.3 Apr 28, 2026, 8:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604280833
Version 1.2 Apr 14, 2026, 10:48 PM Detection (updated detection logic) Plugin Feed: 202604142248
Version 1.1 Apr 13, 2026, 9:27 PM New Plugin Feed: 202604132127