The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in     sd_probe() after large pool creation failure After device_add(&sdkp->disk_dev) succeeds,     sd_large_pool_create() failure must unregister disk_dev and let scsi_disk_release() free sdkp. Going     through out_free_index kfree()s an already registered device and leaks the sysfs entry. (CVE-2026-90268)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-90268

high Nessus Plugin ID 347393

Version 1.10