The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 (simpe_xattr: use per-sb     cache), kernfs_xattr_set() and kernfs_xattr_get() compute the cache via kernfs_root(kn) before any other     check. kernfs_root(kn) walks kn->__parent first and falls back to kn->dir.root, both of which are NULL on     a freshly kmem_cache_zalloc()'d kn. kn->__parent was being set in kernfs_new_node() after
    __kernfs_new_node() returned, and kn->dir.root is set even later by kernfs_create_dir_ns() /     kernfs_create_empty_dir(). The LSM kernfs_init_security hook is invoked from inside __kernfs_new_node(),     before either field has been initialized. selinux_kernfs_init_security() ends with kernfs_xattr_set(kn,     XATTR_NAME_SELINUX, ...). kernfs_root(kn) then returns NULL, and &((struct kernfs_root *)NULL)->xa_cache     evaluates to offsetof(struct kernfs_root, xa_cache) which faults: BUG: kernel NULL pointer dereference,     address: 00000000000000e0 RIP: 0010:simple_xattr_set+0x27/0x8b0 Call Trace: kernfs_xattr_set+0x63/0xb0     selinux_kernfs_init_security+0x13b/0x270 security_kernfs_init_security+0x36/0xc0
    __kernfs_new_node+0x182/0x290 kernfs_new_node+0x80/0xc0 kernfs_create_dir_ns+0x2b/0xa0     cgroup_create+0x116/0x380 cgroup_mkdir+0x7c/0x1a0 Reproduces deterministically at PID 1 (systemd) on an     SELinux-enabled distro. The first cgroup mkdir under /sys/fs/cgroup with a labelled parent panics the     kernel. The LSM hook's contract is that the kn_dir argument is the parent of the new kn, so kn->__parent     should already point at kn_dir when the hook runs. Move kernfs_get(parent) and rcu_assign_pointer of     kn->__parent from kernfs_new_node() into __kernfs_new_node() right before the security hook, and unwind     the parent reference on the err_out4 path. kernfs_root(kn) then takes its parent branch during the hook     and returns parent->dir.root, which is the correct root. This also closes the same-shape latent bug in     kernfs_xattr_get() (which today is hidden only by kernfs_iattrs_noalloc() returning NULL on a fresh kn).
    (CVE-2026-74342)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74342

medium Nessus Plugin ID 335519

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.12 Nov 6, 2026, 2:22 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.11 Oct 31, 2026, 5:30 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610310530
Version 1.10 Oct 30, 2026, 9:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610302110
Version 1.9 Oct 28, 2026, 8:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610280856
Version 1.8 Oct 13, 2026, 2:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.7 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin Feed: 202609231321
Version 1.6 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.5 Aug 28, 2026, 2:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608280204
Version 1.4 Aug 21, 2026, 7:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608210741
Version 1.2 Aug 19, 2026, 6:09 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 4.7) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608190609
Version 1.1 Aug 15, 2026, 5:20 PM New Plugin Feed: 202608151720