There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in
    read_log_rec_buf() read_log_rec_buf() copies a log record into a caller buffer starting at u32 off =
    lsn_to_page_off(log, lsn) + log->record_header_len; log->record_header_len (and log->data_off, used for
    the following pages) comes verbatim from the on-disk restart area and is only checked for 8-byte alignment
    in is_rst_area_valid(), so off can exceed log->page_size. "tail = log->page_size - off" then underflows
    and memcpy() reads past the page_size-sized buffer returned by read_log_page(), spilling adjacent slab
    memory into the replay buffer. This is reachable by mounting a crafted NTFS image: BUG: KASAN: slab-out-
    of-bounds in read_log_rec_buf+0x216/0x580 Read of size 64 at addr ffff88800a877ff8 by task exploit/127
    read_log_rec_buf fs/ntfs3/fslog.c:2299 log_replay fs/ntfs3/fslog.c:4216 ntfs_loadlog_and_replay
    fs/ntfs3/fsntfs.c:324 ntfs_fill_super fs/ntfs3/super.c:1392 get_tree_bdev_flags fs/super.c:1694
    __x64_sys_mount fs/namespace.c:4360 The buggy address is located 4088 bytes to the right of the 4096-byte
    region [ffff88800a876000, ffff88800a877000) Reject an in-page offset outside the current page before the
    copy. [almaz.alexandrovich@paragon-software.com: replaced the >= sign with >] (CVE-2026-89781)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a     caller buffer starting at u32 off = lsn_to_page_off(log, lsn) + log->record_header_len;
    log->record_header_len (and log->data_off, used for the following pages) comes verbatim from the on-disk     restart area and is only checked for 8-byte alignment in is_rst_area_valid(), so off can exceed     log->page_size. tail = log->page_size - off then underflows and memcpy() reads past the page_size-sized     buffer returned by read_log_page(), spilling adjacent slab memory into the replay buffer. This is     reachable by mounting a crafted NTFS image: BUG: KASAN: slab-out-of-bounds in read_log_rec_buf+0x216/0x580     Read of size 64 at addr ffff88800a877ff8 by task exploit/127 read_log_rec_buf fs/ntfs3/fslog.c:2299     log_replay fs/ntfs3/fslog.c:4216 ntfs_loadlog_and_replay fs/ntfs3/fsntfs.c:324 ntfs_fill_super     fs/ntfs3/super.c:1392 get_tree_bdev_flags fs/super.c:1694 __x64_sys_mount fs/namespace.c:4360 The buggy     address is located 4088 bytes to the right of the 4096-byte region [ffff88800a876000, ffff88800a877000)     Reject an in-page offset outside the current page before the copy. [almaz.alexandrovich@paragon-     software.com: replaced the >= sign with >] (CVE-2026-89781)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
470013	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.505.8	Tenable Cloud Security	Google COS Security Checks	10/3/2026	10/6/2026	high
470013	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.505.8	Tenable Self-Hosted Container Security	Google COS Security Checks	10/3/2026	10/6/2026	high
349315	Linux Distros Unpatched Vulnerability : CVE-2026-89781	Nessus	Misc.	9/23/2026	10/5/2026	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	10/4/2026	10/4/2026	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	9/29/2026	9/29/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high