The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: fix cifsFileInfo reference leak in deferred close When cifs_close() defers a close, it hands     the cifsFileInfo reference of the closing struct file to the queued work. Each execution of     smb2_deferred_work_close() drops one such reference. deferred_close_scheduled can be false while the work     is pending: the workqueue clears PENDING when the callback starts to run, before the callback clears the     flag under deferred_lock. A close in that interval requeues the running work, and the callback then clears     the flag, leaving the requeued work pending with the flag down. A later cifs_open() can reuse the handle     and its cifs_close() reaches the same branch: queue_delayed_work() fails because the work is still     pending, but cifs_close() returns without dropping the closing file's reference. The cifsFileInfo count     stays pinned and its tlink, dentry and server handle are leaked. Check the return value and hand off the     reference only when work was actually queued. Otherwise, use the shared _cifsFileInfo_put(), like the     mod_delayed_work() branch above: the pending execution already owns its reference. This issue was found by     an in-house static analysis tool. (CVE-2026-97558)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97558

high Nessus Plugin ID 350327

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.10 Nov 6, 2026, 2:22 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611061422
Version 1.9 Nov 4, 2026, 12:13 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611041213
Version 1.8 Oct 31, 2026, 12:23 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610311223
Version 1.7 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin Feed: 202610180528
Version 1.6 Oct 17, 2026, 4:43 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202610170443
Version 1.5 Oct 13, 2026, 2:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610130252
Version 1.4 Oct 2, 2026, 1:05 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610021305
Version 1.2 Sep 29, 2026, 4:08 PM Plugin metadata Detection (updated detection logic) CVSSv2 severity (based on CVE-2026-97558, severity increased from "Medium" to "High") CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" set to 7.2) Plugin Feed: 202609291608
Version 1.1 Sep 26, 2026, 2:30 AM New Plugin Feed: 202609260230