The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/hugetlb: restore reservation on error in hugetlb folio copy paths Two sites in mm/hugetlb.c allocate a     hugetlb folio via alloc_hugetlb_folio() (consuming a VMA reservation) and then call     copy_user_large_folio(), which became int-returning in commit 1cb9dc4b475c (mm: hwpoison: support     recovery from HugePage copy-on-write faults) and can now fail (e.g. -EHWPOISON on a hwpoisoned source     page). On the failure path, folio_put() restores the global hugetlb pool count through free_huge_folio(),     but the per-VMA reservation map entry is left marked consumed: - hugetlb_mfill_atomic_pte() resubmission     path (UFFDIO_COPY) - copy_hugetlb_page_range() fork-time CoW path when hugetlb_try_dup_anon_rmap() fails     (rare: pinned hugetlb anon folio under fork) User-visible effect: on UFFDIO_COPY into a private hugetlb     VMA where the resubmission copy fails, the reservation for that address is leaked from the VMA's reserve     map. A subsequent fault at the same address takes the no-reservation path, and under hugetlb pool pressure     the task is SIGBUSed at an address it had previously reserved. The fork-time CoW path leaks the same way     in the child VMA's reserve map, though it requires the much rarer combination of pinned hugetlb anon page     + hwpoisoned source. Add the missing restore_reserve_on_error() call before folio_put() on both error     paths. (CVE-2026-53154)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
323413	Linux Distros Unpatched Vulnerability : CVE-2026-53154	Nessus	Misc.	6/28/2026	7/9/2026	medium
322944	Photon OS 5.0: Linux PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	6/26/2026	8/1/2026	high
327383	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1925)	Nessus	Amazon Linux Local Security Checks	7/16/2026	7/31/2026	high
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	7/20/2026	7/31/2026	high

Detections

Analytics

Plugins Search

medium

high

high

high