In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in nilfs_transaction_begin(). This occurs because the cleaner ioctl falls into an infinite loop if nilfs_segctor_construct() repeatedly returns -EROFS (e.g. the device is remounted as read-only after an I/O error). Currently in nilfs_clean_segments(), if err is non-zero, it logs the error and sleeps but doesn't abort when it encounters a terminal error like -EROFS. This causes the thread to loop forever. Fix this by breaking out of the loop if nilfs_segctor_construct() returns -EROFS. This matches the behaviour in nilfs_segctor_write_out(), which also handles -EROFS.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in     nilfs_transaction_begin(). This occurs because the cleaner ioctl falls into an infinite loop if     nilfs_segctor_construct() repeatedly returns -EROFS (e.g. the device is remounted as read-only after an     I/O error). Currently in nilfs_clean_segments(), if err is non-zero, it logs the error and sleeps but     doesn't abort when it encounters a terminal error like -EROFS. This causes the thread to loop forever. Fix     this by breaking out of the loop if nilfs_segctor_construct() returns -EROFS. This matches the behaviour     in nilfs_segctor_write_out(), which also handles -EROFS. (CVE-2026-90420)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
366919	Debian dla-4841 : ata-modules-6.1.0-53-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
366741	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)	Nessus	Amazon Linux Local Security Checks	Local	critical
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
347885	Linux Distros Unpatched Vulnerability : CVE-2026-90420	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-90420

medium

Tenable Plugins

high

critical

high

high

medium