The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier,     which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per     memory device and stored in 'struct cxl_memdev_state', even though it only needs the region state (the     region's SPA range and its extended linear cache size). Instead of keeping the memory device and endpoint     alive, the correct fix is to move the notifier into 'struct cxl_region' and register it from     cxl_region_probe() as it should be a per-region notifier. Setup the registration to only happen for     regions that have an extended linear cache as that is the only current usage. Remove     cxl_port_get_spa_cache_alias() as it is now dead code. [ dj: Update dev_warn() when notifier fails due to     kconfig. (Ben) ] (CVE-2026-89570)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89570

high Nessus Plugin ID 345316

Version 1.11

Version 1.10

Version 1.9

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.11 Oct 26, 2026, 2:57 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610261457
Version 1.10 Oct 23, 2026, 5:20 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610230520
Version 1.9 Oct 22, 2026, 12:02 AM CVSS metrics ("CVSSv2 score" set to 6.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.5 Sep 16, 2026, 1:13 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-89570, severity decreased from "High" to "Medium") Plugin Feed: 202609161313
Version 1.4 Sep 15, 2026, 6:55 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-89570, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609151855
Version 1.3 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.2 Sep 14, 2026, 1:09 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202609141309
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105