In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call __nvmem_device_put() - which may end up freeing the underlying memory and other resources - and then keep on using the nvmem structure. Always put the reference to the nvmem device as the last step before returning the error code.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call
    __nvmem_device_put() - which may end up freeing the underlying memory and other resources - and then keep     on using the nvmem structure. Always put the reference to the nvmem device as the last step before     returning the error code. (CVE-2026-53156)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
329305	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21388-1)	Nessus	SuSE Local Security Checks	Local	high
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	Local	high
327383	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1925)	Nessus	Amazon Linux Local Security Checks	Local	high
323509	Linux Distros Unpatched Vulnerability : CVE-2026-53156	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-53156

high

Tenable Plugins

high

high

high

high