In the Linux kernel, the following vulnerability has been resolved: llc: fix SAP refcount leak in llc_ui_autobind() llc_ui_autobind() opens a SAP after choosing a dynamic LSAP. llc_sap_open() returns a reference owned by the caller, and llc_sap_add_socket() takes a second reference for the socket's membership in the SAP hash tables. llc_ui_bind() drops the caller's reference after adding the socket, but llc_ui_autobind() keeps it. When the socket is closed, llc_sap_remove_socket() releases only the socket reference, leaving the SAP on llc_sap_list with sk_count == 0. This is user-visible because repeated autobind and close cycles can consume all dynamic SAP values and make later autobinds fail with -EUSERS. Drop the caller's reference after a successful autobind, matching llc_ui_bind()'s ownership model.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - llc: fix SAP refcount leak in llc_ui_autobind() llc_ui_autobind() opens a SAP after choosing a dynamic     LSAP. llc_sap_open() returns a reference owned by the caller, and llc_sap_add_socket() takes a second     reference for the socket's membership in the SAP hash tables. llc_ui_bind() drops the caller's reference     after adding the socket, but llc_ui_autobind() keeps it. When the socket is closed,     llc_sap_remove_socket() releases only the socket reference, leaving the SAP on llc_sap_list with sk_count     == 0. This is user-visible because repeated autobind and close cycles can consume all dynamic SAP values     and make later autobinds fail with -EUSERS. Drop the caller's reference after a successful autobind,     matching llc_ui_bind()'s ownership model. (CVE-2026-72022)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Type	Severity
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	Local	high
337827	Linux Distros Unpatched Vulnerability : CVE-2026-72022	Nessus	Misc.	Local	medium
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-72022

medium

Tenable Plugins

high

medium

high