An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with     SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true but never clears it on the error path.
    This leaves the connection in a binding state where all subsequent ksmbd_session_lookup_all() calls fall     back to the global sessions table. This fix it by clearing conn->binding = false in the error path.
    (CVE-2026-31409)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
306005	Photon OS 5.0: Linux PHSA-2026-5.0-0813	Nessus	PhotonOS Local Security Checks	4/11/2026	4/27/2026	high
305087	Linux Distros Unpatched Vulnerability : CVE-2026-31409	Nessus	Misc.	4/6/2026	4/11/2026	medium

Detections

Analytics

Plugins Search

high

medium