The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when     proc setup fails ksmbd_server_init() calls ksmbd_proc_init() before creating the remaining proc entries     and server subsystems. ksmbd_proc_init() tears down partial state on a procfs or percpu_counter allocation     failure, but returns void, so ksmbd_server_init() continues as if the counters were usable. Once userspace     starts the server, server_ctrl_handle_init() calls ksmbd_proc_reset(), which reaches percpu_counter_set()     with a NULL per-CPU counters pointer on SMP systems. The later ksmbd_proc_create() calls also receive a     NULL parent and may create entries in the /proc root; ksmbd_proc_cleanup() cannot remove those entries     because ksmbd_proc_fs is NULL. (CVE-2026-90164)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	11/5/2026	11/5/2026	high
347478	Linux Distros Unpatched Vulnerability : CVE-2026-90164	Nessus	Misc.	9/18/2026	11/13/2026	medium

Detections

Analytics

Plugins Search

high

medium