The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnotify_recalc_mask() fails to handle the     return value of __fsnotify_recalc_mask(), which may return an inode pointer that needs to be released via     fsnotify_drop_object() when the connector's HAS_IREF flag transitions from set to cleared. This manifests     as a hung task with the following call trace: INFO: task umount:1234 blocked for more than 120 seconds.
    Call Trace: __schedule schedule fsnotify_sb_delete generic_shutdown_super kill_anon_super cleanup_mnt     task_work_run do_exit do_group_exit The race window that triggers the iref leak: Thread A (adding mark)     Thread B (removing mark)   fsnotify_add_mark_locked():
    fsnotify_add_mark_list(): spin_lock(conn->lock) add mark_B(evictable) to list spin_unlock(conn->lock)     return /* ---- gap: no lock held ---- */ fsnotify_detach_mark(mark_A): spin_lock(mark_A->lock) clear     ATTACHED flag on mark_A spin_unlock(mark_A->lock) fsnotify_put_mark(mark_A) fsnotify_recalc_mask():
    spin_lock(conn->lock) __fsnotify_recalc_mask(): /* mark_A skipped: ATTACHED cleared */ /* only     mark_B(evictable) remains */ want_iref = false has_iref = true /* not yet cleared */ -> HAS_IREF     transitions true -> false -> returns inode pointer spin_unlock(conn->lock) /* BUG: return value discarded!
    * iput() and fsnotify_put_sb_watched_objects() * are never called */ Fix this by deferring the transition     true -> false of HAS_IREF flag from fsnotify_recalc_mask() (Thread A) to fsnotify_put_mark() (thread B).
    (CVE-2026-52990)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
343532	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)	Nessus	Ubuntu Local Security Checks	9/7/2026	9/10/2026	high
340680	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8665-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/27/2026	high
322107	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1894)	Nessus	Amazon Linux Local Security Checks	6/22/2026	8/10/2026	high
322020	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1866)	Nessus	Amazon Linux Local Security Checks	6/22/2026	8/6/2026	high
322596	Linux Distros Unpatched Vulnerability : CVE-2026-52990	Nessus	Misc.	6/25/2026	9/7/2026	medium
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

medium

high

high