The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a     thread is stopped in syscall_trace_enter() for ptrace, another thread can install a seccomp filter with     SECCOMP_FILTER_FLAG_TSYNC (e.g., via seccomp_attach_filter()). This will successfully set     SYSCALL_WORK_SECCOMP on the stopped thread, but syscall_trace_enter() evaluates a cached 'work' variable     sampled on entry. Consequently, the subsequent check for SYSCALL_WORK_SECCOMP misses the newly assigned     flag, and the filter is silently bypassed. This race condition could allow an unprivileged process to     execute a prohibited system call (e.g., execve) that the newly installed filter was intended to block,     especially since the tracer might have modified the system call number during the ptrace stop. Fix this by     re-reading the syscall_work flags after ptrace handling, so that any new SYSCALL_WORK_SECCOMP flag set by     another thread via TSYNC during the ptrace stop is observed before the subsequent seccomp check.
    (CVE-2026-89603)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89603

high Nessus Plugin ID 345429

Version 1.9

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Sep 30, 2026, 6:31 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.5 Sep 16, 2026, 6:23 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:N") Plugin Feed: 202609161823
Version 1.4 Sep 15, 2026, 6:55 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609151855
Version 1.3 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:P/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.2 Sep 14, 2026, 1:09 PM CVSS metrics ("CVSSv2 score" set to 6.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:N") CVSS metrics ("CVSSv3 score" set to 8.4) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202609141309
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105