The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NFSD: Prevent post-shutdown use-after-free in unlock_filesystem Writing a filesystem path to     /proc/fs/nfsd/unlock_filesystem runs nfsd4_cancel_copy_by_sb() before nfsd_mutex is held and before the     handler confirms that nn->nfsd_serv is set. Once nfsd has shut down, nfs4_state_destroy_net() has freed     nn->conf_id_hashtbl but left the pointer intact, so the cancel helper iterates freed slab memory as an     array of struct list_head and then dereferences a bogus nfs4_client when it takes clp->async_lock. A local     administrator holding CAP_SYS_ADMIN can reach this use-after-free by stopping the server and then writing     to unlock_filesystem; KASAN reports a slab-use-after-free read in nfsd4_cancel_copy_by_sb().
    nfsd4_revoke_states() walks the same state tables and for that reason already runs only under nfsd_mutex     with nn->nfsd_serv confirmed present. Move the async COPY cancel into that protected section so every     NFSv4 state-table walker on this path observes a running server. Async copies exist only while the server     runs, so gating the cancel on nn->nfsd_serv loses nothing. (CVE-2026-89661)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89661

high Nessus Plugin ID 345093

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Oct 16, 2026, 2:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610160212
Version 1.3 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609231321
Version 1.2 Sep 14, 2026, 6:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105