The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de (dm cache policy smq: fix     missing locks in invalidating cache blocks) added mq->lock around the destructive part of     smq_invalidate_mapping(), but left the e->allocated check outside the critical section. That leaves a     check-then-act race. Two concurrent invalidators can both observe e->allocated as true before either of     them takes mq->lock. The first invalidator that acquires the lock removes the entry from the queues and     hash table and then calls free_entry(), which clears e->allocated and puts the entry back on the free     list. The second invalidator can then acquire mq->lock and continue with the stale result of the unlocked     check. This can corrupt the SMQ queues or hash table by deleting an entry that is no longer on those     structures. It can also hit the allocation check in free_entry() when the same entry is freed again. Move     the allocation check under mq->lock so the predicate and the destructive operations are serialized by the     same lock. (CVE-2026-53265)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53265

high Nessus Plugin ID 323588

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Jul 17, 2026, 5:47 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2026-53265, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin Feed: 202607170547
Version 1.6 Jul 16, 2026, 9:04 PM CVSSv3 score source (changed from "CVE-2026-53265" to none) Plugin Feed: 202607162104
Version 1.5 Jul 15, 2026, 2:58 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-53265, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2026-53265") Detection (updated detection logic) Plugin Feed: 202607150258
Version 1.4 Jul 6, 2026, 4:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607060458
Version 1.3 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.2 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.1 Jun 28, 2026, 8:12 PM New Plugin Feed: 202606282012