The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tracing: Fix crash passing ERR_PTR to kthread_stop() event_test_stuff() calls kthread_run() and     unconditionally passes the returned task_struct pointer to kthread_stop(). kthread_run() returns an error     pointer such as ERR_PTR(-ENOMEM) when kthread creation fails, for example under memory pressure during the     boot-time event self-test. kthread_stop() then dereferences the invalid pointer, crashing the kernel.
    Check the result of kthread_run() before passing it to kthread_stop(). Use WARN_ON() so that a failure to     create the self-test thread does not go unnoticed, matching the ring-buffer self-test fix in commit     91542863abad (ring-buffer: Fix crash passing ERR_PTR to kthread_stop()). (CVE-2026-89749)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89749

medium Nessus Plugin ID 345405

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Sep 30, 2026, 1:44 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300144
Version 1.3 Sep 15, 2026, 6:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609151855
Version 1.2 Sep 14, 2026, 6:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105