The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible fh_compose of wrong     dentry in nfsd4_create_file() dentry_create() can hypothetically provide a different dentry than the one     passed in. This could happen, for example, if the exported filesystem is NFS, and the server returned to     OPEN a filehandle which matched a directory that was already in the dcache. Clearly this would not be     expected! If this were to happen the dentry (child) that was already stored in resfhp could be freed and     later dereferenced. We shouldn't call fh_compose() until we are certain that we have the final dentry, so     this patch moved the fh_compose() call to two places: one for the case where the target already exists,     and one after dentry_create() where it was created. (CVE-2026-89677)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
345148	Linux Distros Unpatched Vulnerability : CVE-2026-89677	Nessus	Misc.	9/12/2026	11/10/2026	critical
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high

Detections

Analytics

Plugins Search

critical

high