In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference to the durable file descriptor early during the durable reconnect process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails) or a scavenger accesses the file, it leads to a use-after-free when accessing fp properties (eg fp->create_time). Move the single put to the end of the function below err_out2 so fp stays valid until smb2_open returns.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8911-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Hardware crypto device drivers;

    - NVIDIA Tegra memory controller driver;

    - Network drivers;

    - USB core drivers;

    - GFS2 file system;

    - OCFS2 file system;

    - SMB network file system;

    - SoundWire (SDCA) ASoC drivers;

    - B.A.T.M.A.N. meshing protocol;

    - Ceph Core library;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Open vSwitch;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol; (CVE-2026-43095, CVE-2026-52914, CVE-2026-52931, CVE-2026-52955, CVE-2026-52958,     CVE-2026-52982, CVE-2026-52986, CVE-2026-52993, CVE-2026-52999, CVE-2026-53002, CVE-2026-53006,     CVE-2026-53010, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046, CVE-2026-53049, CVE-2026-53055,     CVE-2026-53088, CVE-2026-53151, CVE-2026-53175, CVE-2026-53215, CVE-2026-53216, CVE-2026-53224,     CVE-2026-53246, CVE-2026-53247, CVE-2026-53260, CVE-2026-53309, CVE-2026-64531, CVE-2026-68372)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8748-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Hardware crypto device drivers;

    - NVIDIA Tegra memory controller driver;

    - Network drivers;

    - GFS2 file system;

    - OCFS2 file system;

    - SMB network file system;

    - B.A.T.M.A.N. meshing protocol;

    - Ceph Core library;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Open vSwitch;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol; (CVE-2026-52914, CVE-2026-52931, CVE-2026-52955, CVE-2026-52958, CVE-2026-52982,     CVE-2026-52986, CVE-2026-52993, CVE-2026-52999, CVE-2026-53002, CVE-2026-53006, CVE-2026-53010,     CVE-2026-53043, CVE-2026-53045, CVE-2026-53046, CVE-2026-53049, CVE-2026-53055, CVE-2026-53088,     CVE-2026-53151, CVE-2026-53175, CVE-2026-53215, CVE-2026-53216, CVE-2026-53224, CVE-2026-53246,     CVE-2026-53247, CVE-2026-53260, CVE-2026-53309, CVE-2026-64531)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to     ksmbd_put_durable_fd(fp) drops the reference to the durable file descriptor early during the durable     reconnect process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails) or a scavenger accesses     the file, it leads to a use-after-free when accessing fp properties (eg fp->create_time). Move the single     put to the end of the function below err_out2 so fp stays valid until smb2_open returns. (CVE-2026-53010)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365766	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8911-1)	Nessus	Ubuntu Local Security Checks	Local	medium
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
344782	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8748-1)	Nessus	Ubuntu Local Security Checks	Local	critical
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	Local	high
340681	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	Local	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	Local	high
322692	Linux Distros Unpatched Vulnerability : CVE-2026-53010	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-53010

critical

Tenable Plugins

medium

high

high

critical

high

high

high

critical