In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be used later on during SFP events. This issue existed before the generic phylib sfp support, back when drivers were calling phy_sfp_probe themselves.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call     sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise the sfp-bus is left with a     dangling 'upstream' field, that may be used later on during SFP events. This issue existed before the     generic phylib sfp support, back when drivers were calling phy_sfp_probe themselves. (CVE-2026-53232)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333762	Photon OS 5.0: Linux PHSA-2026-5.0-92-0895	Nessus	PhotonOS Local Security Checks	Local	high
332637	Photon OS 5.0: Linux PHSA-2026-5.0-91-0895	Nessus	PhotonOS Local Security Checks	Local	medium
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	Local	high
327383	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1925)	Nessus	Amazon Linux Local Security Checks	Local	high
323394	Linux Distros Unpatched Vulnerability : CVE-2026-53232	Nessus	Misc.	Local	high
322944	Photon OS 5.0: Linux PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-53232

high

Tenable Plugins

high

medium

high

high

high

high