The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the userspace witness-     notify command. The intended sender is the cifs.witness helper, but the generic-netlink operation     currently has no capability flag, so any local process can send RESOURCE_CHANGE or CLIENT_MOVE     notifications to the in-kernel witness handler. The same family exposes CIFS_GENL_MCGRP_SWN without     multicast-group capability flags. Register messages sent to that group include the witness registration id     and, for NTLM-authenticated mounts, the username, domain, and password attributes copied from the CIFS     session. An unprivileged local process should not be able to join that group and receive those messages.
    Require CAP_NET_ADMIN for incoming SWN_NOTIFY commands with GENL_ADMIN_PERM, and require CAP_NET_ADMIN     over the network namespace for joining the SWN multicast group with GENL_MCAST_CAP_NET_ADMIN. The     cifs.witness service runs with the privileges needed for both operations. (CVE-2026-64137)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
328078	Linux Distros Unpatched Vulnerability : CVE-2026-64137	Nessus	Misc.	7/20/2026	7/29/2026	high
318773	Photon OS 5.0: Linux PHSA-2026-5.0-0864	Nessus	PhotonOS Local Security Checks	6/5/2026	8/1/2026	high
328499	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-110 (ALASKERNEL-5.15-2026-110)	Nessus	Amazon Linux Local Security Checks	7/20/2026	7/31/2026	medium
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	7/24/2026	7/28/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high