An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de (dm cache policy smq: fix     missing locks in invalidating cache blocks) added mq->lock around the destructive part of     smq_invalidate_mapping(), but left the e->allocated check outside the critical section. That leaves a     check-then-act race. Two concurrent invalidators can both observe e->allocated as true before either of     them takes mq->lock. The first invalidator that acquires the lock removes the entry from the queues and     hash table and then calls free_entry(), which clears e->allocated and puts the entry back on the free     list. The second invalidator can then acquire mq->lock and continue with the stale result of the unlocked     check. This can corrupt the SMQ queues or hash table by deleting an entry that is no longer on those     structures. It can also hit the allocation check in free_entry() when the same entry is freed again. Move     the allocation check under mq->lock so the predicate and the destructive operations are serialized by the     same lock. (CVE-2026-53265)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	8/1/2026	medium
323588	Linux Distros Unpatched Vulnerability : CVE-2026-53265	Nessus	Misc.	6/28/2026	7/16/2026	high
327383	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1925)	Nessus	Amazon Linux Local Security Checks	7/16/2026	7/31/2026	high

Detections

Analytics

Plugins Search

medium

high

high