The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file     pointer backing req->hr_sk->sk_socket to survive the window between handshake_req_next() and the     subsequent FD_PREPARE() and get_file(). The submit-side sock_hold() does not provide that. sk_refcnt keeps     struct sock alive, but struct socket is owned by sock->file: when the consumer fputs the last file     reference, sock_release() tears the socket down regardless of any sock_hold. Add an hr_file pointer to     struct handshake_req and acquire an explicit reference on sock->file during handshake_req_submit().
    handshake_complete() and handshake_req_cancel() release the reference on the completion-bit-winning path.
    The submit error path must also release the file reference, but after rhashtable insertion a concurrent     handshake_req_cancel() can discover the request and race the error path. Gate the error-path cleanup --     sk_destruct restoration, fput, and request destruction -- with     test_and_set_bit(HANDSHAKE_F_REQ_COMPLETED), the same serialization handshake_complete() and     handshake_req_cancel() already use. When cancel has already claimed ownership, the submit error path     returns without touching the request; socket teardown handles final destruction. The accept-side     dereferences are not yet retargeted; that change comes in the next patch. (CVE-2026-64523)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64523

critical Nessus Plugin ID 329830

Version 1.7

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Jul 30, 2026, 11:45 AM CVSSv3 score source (changed from "CVE-2026-64523" to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202607301145
Version 1.5 Jul 29, 2026, 6:41 AM Detection (updated detection logic) Plugin Feed: 202607290641
Version 1.4 Jul 29, 2026, 12:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290029
Version 1.3 Jul 28, 2026, 3:13 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2026-64523, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607280313
Version 1.2 Jul 27, 2026, 9:02 PM Detection (Plugin has been deprecated) Plugin Feed: 202607272102
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011