The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - lockd: fix NULL dereference on lockowner allocation failure nlmclnt_locks_init_private() installs NLM file     lock operations even when nlmclnt_find_lockowner() fails to allocate a lockowner. nlmclnt_proc() then     returns -ENOMEM, but the VFS still tears down the partially initialized file_lock and calls     locks_release_private(). That invokes nlmclnt_locks_release_private(), which dereferences     fl->fl_u.nfs_fl.owner and crashes because the owner was never installed. Clear fl_ops before attempting to     initialize the NLM private state, and install the NLM lock operations only after a lockowner has been     allocated successfully. (CVE-2026-89484)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89484

medium Nessus Plugin ID 345306

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Sep 30, 2026, 1:44 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300144
Version 1.4 Sep 23, 2026, 1:21 PM Detection (updated detection logic) Plugin Feed: 202609231321
Version 1.3 Sep 18, 2026, 11:05 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609182305
Version 1.2 Sep 14, 2026, 6:39 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105