In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBD_DEBUG_AUTH logging is enabled, generate_smb3signingkey() and generate_smb3encryptionkey() log the session, signing, encryption, and decryption key bytes. Remove the logs to avoid exposing credentials.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBD_DEBUG_AUTH logging is     enabled, generate_smb3signingkey() and generate_smb3encryptionkey() log the session, signing, encryption,     and decryption key bytes. Remove the logs to avoid exposing credentials. (CVE-2026-43377)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
321210	Photon OS 5.0: Linux PHSA-2026-5.0-0837	Nessus	PhotonOS Local Security Checks	high
314397	Linux Distros Unpatched Vulnerability : CVE-2026-43377	Nessus	Misc.	high
313507	Photon OS 5.0: Linux PHSA-2026-5.0-0842	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2026-43377

high

Tenable Plugins

high

high

high