The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file     pointer backing req->hr_sk->sk_socket to survive the window between handshake_req_next() and the     subsequent FD_PREPARE() and get_file(). The submit-side sock_hold() does not provide that. sk_refcnt keeps     struct sock alive, but struct socket is owned by sock->file: when the consumer fputs the last file     reference, sock_release() tears the socket down regardless of any sock_hold. Add an hr_file pointer to     struct handshake_req and acquire an explicit reference on sock->file during handshake_req_submit().
    handshake_complete() and handshake_req_cancel() release the reference on the completion-bit-winning path.
    The submit error path must also release the file reference, but after rhashtable insertion a concurrent     handshake_req_cancel() can discover the request and race the error path. Gate the error-path cleanup --     sk_destruct restoration, fput, and request destruction -- with     test_and_set_bit(HANDSHAKE_F_REQ_COMPLETED), the same serialization handshake_complete() and     handshake_req_cancel() already use. When cancel has already claimed ownership, the submit error path     returns without touching the request; socket teardown handles final destruction. The accept-side     dereferences are not yet retargeted; that change comes in the next patch. (CVE-2026-64523)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64523

critical Nessus Plugin ID 329830

Version 1.13

Version 1.12

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Aug 31, 2026, 4:25 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-64523, severity increased from "Medium" to "High") Plugin Feed: 202608311625
Version 1.12 Aug 29, 2026, 12:30 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-64523, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608290030
Version 1.10 Aug 24, 2026, 3:52 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-64523, severity increased from "Medium" to "High") Plugin Feed: 202608241552
Version 1.9 Aug 21, 2026, 5:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608211759
Version 1.8 Aug 19, 2026, 6:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608190609
Version 1.7 Jul 30, 2026, 11:45 AM CVSSv3 score source (changed from "CVE-2026-64523" to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202607301145
Version 1.5 Jul 29, 2026, 6:41 AM Detection (updated detection logic) Plugin Feed: 202607290641
Version 1.4 Jul 29, 2026, 12:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290029
Version 1.3 Jul 28, 2026, 3:13 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2026-64523, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607280313
Version 1.2 Jul 27, 2026, 9:02 PM Detection (Plugin has been deprecated) Plugin Feed: 202607272102
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011