In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs_defer_finish_one() xfs_defer_finish_one() declares error without an initialiser and only assigns it inside the loop over dfp->dfp_work. When that list is empty the loop body never runs, control falls through to the "Done with the dfp, free it" path, and the function returns an indeterminate value. An item-less pending item reaches this through xfs_defer_add_barrier(), which xfs_reap_ag_blocks() uses on any CONFIG_XFS_ONLINE_REPAIR kernel. xfs_defer_finish_noroll() treats any non-EAGAIN return as fatal, so a non-zero stack value turns a successful barrier into a SHUTDOWN_CORRUPT_INCORE in the middle of a repair. Zero is the correct result: reaching the free path means the item loop drained without a non-zero error.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in
    xfs_defer_finish_one() xfs_defer_finish_one() declares error without an initialiser and only assigns it
    inside the loop over dfp->dfp_work. When that list is empty the loop body never runs, control falls
    through to the "Done with the dfp, free it" path, and the function returns an indeterminate value. An
    item-less pending item reaches this through xfs_defer_add_barrier(), which xfs_reap_ag_blocks() uses on
    any CONFIG_XFS_ONLINE_REPAIR kernel. xfs_defer_finish_noroll() treats any non-EAGAIN return as fatal, so a
    non-zero stack value turns a successful barrier into a SHUTDOWN_CORRUPT_INCORE in the middle of a repair.
    Zero is the correct result: reaching the free path means the item loop drained without a non-zero error.
    (CVE-2026-97552)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xfs: initialise error in xfs_defer_finish_one() xfs_defer_finish_one() declares error without an     initialiser and only assigns it inside the loop over dfp->dfp_work. When that list is empty the loop body     never runs, control falls through to the Done with the dfp, free it path, and the function returns an     indeterminate value. An item-less pending item reaches this through xfs_defer_add_barrier(), which     xfs_reap_ag_blocks() uses on any CONFIG_XFS_ONLINE_REPAIR kernel. xfs_defer_finish_noroll() treats any     non-EAGAIN return as fatal, so a non-zero stack value turns a successful barrier into a     SHUTDOWN_CORRUPT_INCORE in the middle of a repair. Zero is the correct result: reaching the free path     means the item loop drained without a non-zero error. (CVE-2026-97552)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
475442	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Cloud Security	Google COS Security Checks	Local	medium
475442	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
364137	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500374)	Nessus	Oracle Linux Local Security Checks	Local	high
362907	Debian dla-4817 : ata-modules-6.12.107+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
351155	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
350390	Linux Distros Unpatched Vulnerability : CVE-2026-97552	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-97552

medium

Tenable Plugins

medium

medium

high

high

high

medium