The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HID: mcp2221: stop device IO before hid_hw_stop Quiesce device IO at the start of the devm cleanup     callback mcp2221_hid_unregister() so that incoming HID reports cannot race with hardware teardown during     probe failure or device removal, addressing a potential use-after-free. Guard the call to     hid_device_io_stop() with io_started. On normal removal hid_device_remove() has already cleared io_started     before the devres group is released, so an unconditional call would otherwise hit the !io_started path and     emit a spurious io already stopped warning on every removal. The guard preserves the probe-failure     balancing, where io_started is still set after hid_device_io_start(), while staying silent on the normal     removal path. (CVE-2026-89623)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89623

high Nessus Plugin ID 345257

Version 1.8

Version 1.7

Version 1.6

Version 1.2

Version 1.1

Version 1.8 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.7 Oct 19, 2026, 6:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610191813
Version 1.6 Oct 13, 2026, 2:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.2 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105