The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series lib/ucs2_string.c: fix out-of-     bounds read in ucs2_strnlen(), v2. This series fixes an off-by-one out-of-bounds read in ucs2_strnlen().
    The first patch is the real fix, the second patch comes as a bonus and fixes the code indentation. This     patch (of 2): ucs2_strnlen() checks the current character before checking whether the caller-provided     maximum length has been reached. If the input is not NUL-terminated within that bound, the loop can read     one ucs2_char_t past the limit. Test the length before dereferencing to prevent an off-by-one out-of-     bounds read. (CVE-2026-89726)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89726

high Nessus Plugin ID 345222

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Sep 30, 2026, 1:44 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300144
Version 1.4 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin Feed: 202609231321
Version 1.3 Sep 22, 2026, 8:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609220827
Version 1.2 Sep 14, 2026, 6:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105