The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PCI: plda: Fix use-after-free of event IRQs during teardown plda_pcie_irq_domain_deinit() removes     pcie->event_domain via irq_domain_remove(), but the per-event IRQs mapped from that domain are requested     with devm_request_irq() in plda_init_interrupts(). The actual free_irq() for a devm-managed IRQ is     deferred by devres until after the calling probe()/remove() function returns. This means     irq_domain_remove() can free the domain's internal data before the deferred free_irq() for IRQs still     mapped into it has run. When devres later processes that deferred cleanup, it can end up dereferencing the     already-freed domain. Free each event IRQ explicitly with devm_free_irq() before removing the domain. This     triggers the free immediately and removes the IRQ from the devres tracking list, so devres will not     attempt to free it a second time later. Also dispose of the event, INTx, and MSI IRQ mappings with     irq_dispose_mapping() before their owning domains are removed. Finally, guard the calls to     irq_set_chained_handler_and_data() for pcie->irq, pcie->msi_irq, and pcie->intx_irq so they only run when     those fields hold a valid (>0) IRQ number. This is a pre-existing issue, flagged by automated review     during work on an earlier, unrelated patch to this driver. Build-tested and boot-tested on StarFive     VisionFive v1.2A board (CVE-2026-89455)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89455

high Nessus Plugin ID 345211

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.6 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610180528
Version 1.5 Sep 30, 2026, 1:44 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300144
Version 1.2 Sep 14, 2026, 6:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105