The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both     presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers     cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the     ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't     refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries     the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared     is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data     fork mapping if the sequence counter changes across the ILOCK cycle. (CVE-2026-64600)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64600

high Nessus Plugin ID 329547

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.4 Aug 7, 2026, 9:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608072155
Version 1.3 Aug 6, 2026, 3:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608061543
Version 1.2 Jul 30, 2026, 11:45 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:U/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202607301145
Version 1.1 Jul 25, 2026, 1:06 PM New Plugin Feed: 202607251306