The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is     clearly detected by KASAN. BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3b/0x80 Read of     size 1 at addr ... by task kworker/9:1 Workqueue: events queue_process Call Trace: skb_dequeue+0x1e/0xb0     queue_process+0x2c/0x600 process_scheduled_works+0x4b6/0x850 worker_thread+0x414/0x5a0 Allocated by task     242: __netpoll_setup+0x201/0x4a0 netpoll_setup+0x249/0x550 enabled_store+0x32f/0x380 Freed by task 0:
    kfree+0x1b7/0x540 rcu_core+0x3f8/0x7a0 The problem happens when there is a pending TX worker running in     parallel with the cleanup path. This is what happens on netpoll shutdown path: 1) __netpoll_cleanup() is     called 2) set dev->npinfo to NULL 3) call_rcu() with rcu_cleanup_netpoll_info() 3.1)     rcu_cleanup_netpoll_info() tries to cancel all workers with cancel_delayed_work(), but doesn't wait for     the worker to finish 4) and kfree(npinfo); Because 3.1) doesn't really cancel the work, as the comment     says we can't call cancel_delayed_work_sync here, as we are in softirq, the TX worker can run after 4).
    Tl;DR: queue_process() is not an RCU reader, it reaches npinfo through the work item via container_of().
    Use disable_delayed_work_sync() to ensure the worker is completely stopped and prevent any future re-     arming attempts. Once npinfo is set to NULL, senders will bail out and not queue new work. The disable     flag ensures any in-flight re-arming attempts also fail silently. In the future, we can do the cleanup     inline here without needing the npinfo->rcu rcu_head, but that is net-next material. (CVE-2026-64424)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-64424

high Nessus Plugin ID 329945

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.6 Aug 28, 2026, 2:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.5 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.4 Aug 14, 2026, 5:17 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
Version 1.3 Aug 7, 2026, 9:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608072155
Version 1.2 Jul 28, 2026, 3:13 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-64424, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607280313
Version 1.1 Jul 26, 2026, 12:11 AM New Plugin Feed: 202607260011