The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the entry     name out of an SMB1 TRANS2_FIND_FIRST / FIND_NEXT response using a length (de.namelen) supplied by the     server. The kmalloc'd SMB response buffer is bounded, but nothing checks that de.name + de.namelen still     lies inside that buffer before the eventual filldir64() -> verify_dirent_name() -> memchr() reads namelen     bytes. A hostile SMB1 server that returns an oversized FileNameLength in a directory entry therefore     causes memchr() to read past the end of the response slab buffer. Reachable from any user who can list a     directory on a CIFS mount served by an attacker-controlled server (getdents64() on the mounted directory):
    BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80 Read of size 1 at addr ffff88800e0640cc by task poc/115     Call Trace: dump_stack_lvl+0x64/0x80 print_report+0xce/0x620 kasan_report+0xec/0x120 memchr+0x71/0x80     filldir64+0x4c/0x6a0 cifs_filldir.constprop.0+0x9bb/0x1e00 cifs_readdir+0x2101/0x3380     iterate_dir+0x19c/0x520 __x64_sys_getdents64+0x126/0x210 do_syscall_64+0x107/0x5a0     entry_SYSCALL_64_after_hwframe+0x77/0x7f Pass the end-of-response pointer down to cifs_filldir() and     reject entries whose name would extend past that boundary. This bug was discovered by Artiphishell's     vTriage pipeline, which generated a userspace reproducer (an emulated hostile SMB1 server plus a     getdents64() client) that reliably triggers the KASAN report on an unpatched kernel. The fix below was     drafted with the Claude coding assistant; a userspace reproducer is available on request. (CVE-2026-93787)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-93787

high Nessus Plugin ID 349824

Version 1.11

Version 1.10

Version 1.9

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.11 Nov 7, 2026, 4:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611070401
Version 1.10 Nov 5, 2026, 10:52 AM Plugin metadata Plugin Feed: 202611051052
Version 1.9 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.7 Nov 2, 2026, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611020829
Version 1.6 Oct 31, 2026, 7:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610311906
Version 1.5 Oct 22, 2026, 12:02 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610220002
Version 1.4 Sep 30, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.3 Sep 29, 2026, 12:49 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202609290049
Version 1.2 Sep 25, 2026, 6:49 PM CVSS metrics ("CVSSv2 score" set to 9.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 8.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609251849
Version 1.1 Sep 25, 2026, 5:53 AM New Plugin Feed: 202609250553