In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make_request() acquires a writes_pending reference with md_write_start() before calling raid10_handle_discard(). Several failure paths in raid10_handle_discard() complete the bio and return without releasing the corresponding reference, causing md_write_end() to be skipped. Call md_write_end() before returning from these failure paths to keep writes_pending accounting balanced. Additionally, discard split allocation failures can occur after wait_barrier() succeeds. Those paths return without calling allow_barrier(), leaking the associated barrier reference. Release the barrier before returning from those paths.

tuxcare ALMALINUX9.2:CLSA-2026:1789898700: kernel: Fix of 163 CVEs (Critical)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - md/raid10: fix writes_pending and barrier reference leaks on discard failures raid10_make_request()     acquires a writes_pending reference with md_write_start() before calling raid10_handle_discard(). Several     failure paths in raid10_handle_discard() complete the bio and return without releasing the corresponding     reference, causing md_write_end() to be skipped. Call md_write_end() before returning from these failure     paths to keep writes_pending accounting balanced. Additionally, discard split allocation failures can     occur after wait_barrier() succeeds. Those paths return without calling allow_barrier(), leaking the     associated barrier reference. Release the barrier before returning from those paths. (CVE-2026-72438)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	Local	high
335510	Linux Distros Unpatched Vulnerability : CVE-2026-72438	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-72438

high

Tenable Plugins

Coming Soon

high

high

high