An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-controlled ACE count     by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits,     but the expression subtracts sizeof(struct smb_acl). Because sizeof() is unsigned, a DACL size smaller     than the ACL header underflows to a large size_t. A malicious client can reach this with: SMB2_SET_INFO     (InfoType=SMB2_O_INFO_SECURITY) -> smb2_set_info_sec() -> set_info_sec() -> parse_sec_desc() ->     parse_dacl() -> init_acl_state(..., 0xffff) -> init_acl_state(..., 0xffff) -> kmalloc_objs(..., 0xffff)     Thus a malformed security descriptor can make num_aces pass the guard and drive large temporary ACL state     and pointer-array allocations. Reject DACLs smaller than struct smb_acl before doing the subtraction, so     the ACE count check cannot be bypassed by the underflow. (CVE-2026-72382)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	8/12/2026	9/7/2026	high
335644	Linux Distros Unpatched Vulnerability : CVE-2026-72382	Nessus	Misc.	8/15/2026	8/28/2026	high

Detections

Analytics

Plugins Search

high

high