The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo nfsd4_ff_encode_getdeviceinfo() computes the     da_addr_body reservation as 16 + netid_len + addr_len, but the subsequent xdr_encode_opaque() calls emit 8     + round_up(netid_len, 4) + round_up(addr_len, 4) bytes. The mismatch means the declared da_addr_body     length exceeds the actual encoded data by 2-8 bytes on every flexfile GETDEVICEINFO reply, leaking stale     reply-page content to the client and mis-aligning the subsequent version list decode. Use xdr_align_size()     for each string length to match what xdr_encode_opaque() actually writes. (CVE-2026-89673)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89673

medium Nessus Plugin ID 345635

Version 1.6

Version 1.5

Version 1.4

Version 1.1

Version 1.6 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.5 Oct 19, 2026, 6:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610191813
Version 1.4 Oct 13, 2026, 2:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.1 Sep 14, 2026, 6:39 PM New Plugin Feed: 202609141839