The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init ntfs_reparse_init() and     ntfs_objid_init() parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles (the     INDEX_ROOT attributes named $R and $O). They read its type and rule fields through resident_data(), which     does not check that the resident attribute is large enough to hold them. mi_enum_attr() accepts a resident     attribute with data_off == asize and data_size == 0. For such an attribute placed last in its MFT record,     resident_data() returns a pointer to the end of the record_size buffer, so reading root->type / root->rule     reads past the allocation. Use resident_data_ex(attr, sizeof(struct INDEX_ROOT)) and bail out when it     returns NULL, as ntfs_security_init() already does for $SDH / $SII. The attribute is only parsed while     mounting a crafted image, so this needs CAP_SYS_ADMIN. BUG: KASAN: slab-out-of-bounds in ntfs_reparse_init     (fs/ntfs3/fsntfs.c:2306) Read of size 4 at addr ffff88801219dc00 by task mount ntfs_reparse_init     (fs/ntfs3/fsntfs.c:2306) ntfs_fill_super (fs/ntfs3/super.c:1604) get_tree_bdev_flags (fs/super.c:1703)     vfs_get_tree (fs/super.c:1758) path_mount (fs/namespace.c:4131) __x64_sys_mount (fs/namespace.c:4360)     (CVE-2026-89785)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89785

high Nessus Plugin ID 349310

Version 1.5

Version 1.4

Version 1.3

Version 1.5 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610180528
Version 1.4 Oct 13, 2026, 2:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.3 Sep 30, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631