The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has     the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with     ATTR_KILL_SUID/ATTR_KILL_SGID together with an ATTR_MODE carrying the already-cleared mode. Both     cifs_setattr_unix() and cifs_setattr_nounix() unconditionally dropped ATTR_MODE in that case: /* skip mode     change if it's just for clearing setuid/setgid */ if (attrs->ia_valid & (ATTR_KILL_SUID|ATTR_KILL_SGID))     attrs->ia_valid &= ~ATTR_MODE; This is fine for the default mount, where the mode is only emulated via the     DOS read-only attribute and cannot represent the setuid/setgid bits anyway. However, with the cifsacl or     modefromsid mount options the mode is stored on the server through an ACL (id_mode_to_cifs_acl()), with     the SMB3.1.1 POSIX extensions the mode is sent to the server directly, and with the SMB1 Unix extensions     (cifs_setattr_unix) the mode is sent via CIFSSMBUnixSetPathInfo(). In all those cases dropping ATTR_MODE     means the cleared mode is never pushed to the server, so the setuid/setgid bit survives the write. This is     a security issue: on local filesystems the setuid bit is stripped when a file is written, but over these     cifs.ko mounts the bit persists on the server, potentially allowing an unexpected privilege escalation on     subsequent execution. Fix this in two places: 1. cifs_setattr_nounix(): only take the skip mode change     shortcut when the mode is emulated via the DOS read-only attribute (i.e. neither cifsacl/modefromsid nor     the SMB3.1.1 POSIX extensions are in effect), so that the cleared mode is propagated to the server in the     ACL / POSIX cases. 2. cifs_setattr_unix(): this function is only called when Unix extensions are in     effect, so the mode is always stored on the server. Remove the shortcut entirely so that the cleared mode     is always pushed. (CVE-2026-89638)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-89638

high Nessus Plugin ID 345262

Version 1.14

Version 1.13

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.14 Oct 27, 2026, 9:59 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610270959
Version 1.13 Oct 27, 2026, 3:42 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610270342
Version 1.11 Oct 19, 2026, 10:23 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610191023
Version 1.10 Oct 17, 2026, 4:43 AM Detection (updated detection logic) CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Plugin metadata Plugin Feed: 202610170443
Version 1.9 Oct 14, 2026, 9:52 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 6.8) Plugin Feed: 202610140952
Version 1.8 Oct 13, 2026, 2:52 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.5 Sep 17, 2026, 12:32 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 6.8) Plugin Feed: 202609171232
Version 1.4 Sep 16, 2026, 5:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609160533
Version 1.3 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.2 Sep 14, 2026, 1:09 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202609141309
Version 1.1 Sep 12, 2026, 9:05 PM New Plugin Feed: 202609122105