An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dlm: fix add msg handle in send_queue ordered In a benchmark scenario triggering a lot of requests that     triggers a lot of DLM messages on the network it can be that the mh->seq is not ordered according the     oldest seq number. This ordering is required by dlm_receive_ack as before(mh->seq, seq) will stop to     check for older sequence numbers that are ordered in the tail of node->send_queue. The side effects of     not having it correct ordered regarding before(mh->seq, seq) are refcounting issues and use-after free.
    I only was able to reproduce this issue in a experimental DLM branch and a user space DLM benchmark that     uses io_uring. After changing this I don't experienced any refcounting with the sending buffer issues     anymore. (CVE-2026-74401)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/4/2026	high
335602	Linux Distros Unpatched Vulnerability : CVE-2026-74401	Nessus	Misc.	8/15/2026	8/28/2026	critical
343049	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	Nessus	Oracle Linux Local Security Checks	9/4/2026	9/5/2026	high

Detections

Analytics

Plugins Search

high

critical

high