In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fat_scan(). fat_rebuild_parent() uses the directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after
    rebuilding parent fat_scan_logstart() leaves the matching directory entry's buffer head in sinfo.bh for
    the caller to release, just like fat_scan(). fat_rebuild_parent() uses the directory entry to rebuild the
    parent inode for the nostale_ro NFS export path, but does not release sinfo.bh after a successful scan.
    Release it once fat_build_inode() has consumed the directory entry data. (CVE-2026-90318)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching directory entry's     buffer head in sinfo.bh for the caller to release, just like fat_scan(). fat_rebuild_parent() uses the     directory entry to rebuild the parent inode for the nostale_ro NFS export path, but does not release     sinfo.bh after a successful scan. Release it once fat_build_inode() has consumed the directory entry data.
    (CVE-2026-90318)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365279	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3196)	Nessus	Amazon Linux Local Security Checks	Local	medium
365220	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3197)	Nessus	Amazon Linux Local Security Checks	Local	medium
365194	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-117)	Nessus	Amazon Linux Local Security Checks	Local	critical
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	Local	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
468592	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.700.7	Tenable Cloud Security	Google COS Security Checks	Local	high
468592	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.700.7	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
347888	Linux Distros Unpatched Vulnerability : CVE-2026-90318	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-90318

high

Tenable Plugins

medium

medium

critical

high

high

high

high

high

high