This means that you still have a vulnerable but not active kernel installed side-by-side with the currently active kernel.
See Setting: Report vulnerabilities of inactive Linux kernel(s) separately for some more background information. If you want to accept the risk of having an inactive but vulnerable kernel installed some more information about this is given there as well.