In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on each fetch If a ublk server starts recovering devices but dies before issuing fetch commands for all IOs, cancellation of the fetch commands that were successfully issued may never complete. This is because the per-IO canceled flag can remain set even after the fetch for that IO has been submitted - the per-IO canceled flags for all IOs in a queue are reset together only once all IOs for that queue have been fetched. So if a nonempty proper subset of the IOs for a queue are fetched when the ublk server dies, the IOs in that subset will never successfully be canceled, as their canceled flags remain set, and this prevents ublk_cancel_cmd from actually calling io_uring_cmd_done on the commands, despite the fact that they are outstanding. Fix this by resetting the per-IO cancel flags immediately when each IO is fetched instead of waiting for all IOs for the queue (which may never happen).

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on
    each fetch If a ublk server starts recovering devices but dies before issuing fetch commands for all IOs,
    cancellation of the fetch commands that were successfully issued may never complete. This is because the
    per-IO canceled flag can remain set even after the fetch for that IO has been submitted - the per-IO
    canceled flags for all IOs in a queue are reset together only once all IOs for that queue have been
    fetched. So if a nonempty proper subset of the IOs for a queue are fetched when the ublk server dies, the
    IOs in that subset will never successfully be canceled, as their canceled flags remain set, and this
    prevents ublk_cancel_cmd from actually calling io_uring_cmd_done on the commands, despite the fact that
    they are outstanding. Fix this by resetting the per-IO cancel flags immediately when each IO is fetched
    instead of waiting for all IOs for the queue (which may never happen). (CVE-2026-53124)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ublk: reset per-IO canceled flag on each fetch If a ublk server starts recovering devices but dies before     issuing fetch commands for all IOs, cancellation of the fetch commands that were successfully issued may     never complete. This is because the per-IO canceled flag can remain set even after the fetch for that IO     has been submitted - the per-IO canceled flags for all IOs in a queue are reset together only once all IOs     for that queue have been fetched. So if a nonempty proper subset of the IOs for a queue are fetched when     the ublk server dies, the IOs in that subset will never successfully be canceled, as their canceled flags     remain set, and this prevents ublk_cancel_cmd from actually calling io_uring_cmd_done on the commands,     despite the fact that they are outstanding. Fix this by resetting the per-IO cancel flags immediately when     each IO is fetched instead of waiting for all IOs for the queue (which may never happen). (CVE-2026-53124)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
472564	Chainguard: linux-qemu-melange: security update to 6.18.49-r2	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
472564	Chainguard: linux-qemu-melange: security update to 6.18.49-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	Local	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	Local	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	Local	high
323480	Linux Distros Unpatched Vulnerability : CVE-2026-53124	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-53124

medium

Tenable Plugins

medium

medium

high

high

high

medium