In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype     before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.
    (CVE-2026-45972)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
317357	Linux Distros Unpatched Vulnerability : CVE-2026-45972	Nessus	Misc.	critical
305231	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1543)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2026-45972

critical

Tenable Plugins

critical

high