The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() Add the missing put_disk() on the     error path in blkcg_maybe_throttle_current(). When blkcg lookup, blkg lookup, or blkg_tryget() fails, the     function jumps to the out label which only calls rcu_read_unlock() but does not release the disk reference     acquired by blkcg_schedule_throttle() via get_device(). Since current->throttle_disk is already set to     NULL before the lookup, blkcg_exit() cannot release this reference either, causing the disk to never be     freed. Restore the reference release that was present as blk_put_queue() in the original code but was     inadvertently dropped during the conversion from request_queue to gendisk. (CVE-2026-53126)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
322020	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1866)	Nessus	Amazon Linux Local Security Checks	6/22/2026	7/31/2026	high
322107	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1894)	Nessus	Amazon Linux Local Security Checks	6/22/2026	7/31/2026	high
322676	Linux Distros Unpatched Vulnerability : CVE-2026-53126	Nessus	Misc.	6/25/2026	8/1/2026	medium

Detections

Analytics

Plugins Search

high

high

medium