The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - io_uring: ensure ctx->rings is stable for task work flags manipulation If DEFER_TASKRUN | SETUP_TASKRUN is     used and task work is added while the ring is being resized, it's possible for the OR'ing of     IORING_SQ_TASKRUN to happen in the small window of swapping into the new rings and the old rings being     freed. Prevent this by adding a 2nd ->rings pointer, ->rings_rcu, which is protected by RCU. The task work     flags manipulation is inside RCU already, and if the resize ring freeing is done post an RCU synchronize,     then there's no need to add locking to the fast path of task work additions. Note: this is only done for     DEFER_TASKRUN, as that's the only setup mode that supports ring resizing. If this ever changes, then they     too need to use the io_ctx_mark_taskrun() helper. (CVE-2026-23275)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
303223	Linux Distros Unpatched Vulnerability : CVE-2026-23275	Nessus	Misc.	3/20/2026	7/31/2026	high
311340	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)	Nessus	Amazon Linux Local Security Checks	4/30/2026	6/17/2026	high

Detections

Analytics

Plugins Search

high

high