The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID vgic_v2_deactivate() passes the INTID a guest     wrote to GICV_DIR straight to vgic_get_vcpu_irq(), and treats a failed lookup as a can't happen     condition with WARN_ON_ONCE(). The guest can make it happen at will, though: for any INTID outside of the     implemented SGI, PPI and SPI ranges the lookup returns NULL, since GICv2 has no LPIs. A guest running with     EOImode==1 writing such an INTID to GICV_DIR triggers the WARN, and panics hosts running with     panic_on_warn. Drop the WARN and ignore failed lookups. (CVE-2026-89727)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
345328	Linux Distros Unpatched Vulnerability : CVE-2026-89727	Nessus	Misc.	9/12/2026	9/23/2026	medium
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

medium

high