The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison Two concurrent     madvise(MADV_HWPOISON) calls on the same hugetlb page can trigger a recursive spinlock self-deadlock (AA     deadlock) on hugetlb_lock when racing with a concurrent unmap: thread#0 thread#1 -------- --------     madvise(folio, MADV_HWPOISON) -> poisons the folio successfully madvise(folio, MADV_HWPOISON) unmap(folio)     try_memory_failure_hugetlb get_huge_page_for_hwpoison spin_lock_irq(&hugetlb_lock) <- held
    __get_huge_page_for_hwpoison hugetlb_update_hwpoison() -> MF_HUGETLB_FOLIO_PRE_POISONED goto out:
    folio_put() refcount: 1 -> 0 free_huge_folio() spin_lock_irqsave(&hugetlb_lock) -> AA DEADLOCK! The out:
    path in __get_huge_page_for_hwpoison() calls folio_put() to drop the GUP reference while the hugetlb_lock     is still held by the hugetlb.c wrapper get_huge_page_for_hwpoison(). If concurrent unmap has released the     page table mapping reference, folio_put() drops the folio refcount to zero, triggering free_huge_folio()     which attempts to re-acquire the non-recursive hugetlb_lock. Fix this by moving hugetlb_lock acquisition     from the hugetlb.c wrapper into get_huge_page_for_hwpoison(). Place spin_unlock_irq() before the     folio_put() at the out: label so the folio is always released outside the lock. [akpm@linux-     foundation.org: fix race, rename label per Miaohe] (CVE-2026-53207)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
327380	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1924)	Nessus	Amazon Linux Local Security Checks	2026/7/16	2026/9/18	high
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	2026/7/20	2026/9/23	high
347900	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:4254-1)	Nessus	SuSE Local Security Checks	2026/9/18	2026/9/29	high
343049	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)	Nessus	Oracle Linux Local Security Checks	2026/9/4	2026/9/23	high
323427	Linux Distros Unpatched Vulnerability : CVE-2026-53207	Nessus	Misc.	2026/6/28	2026/9/29	medium
333941	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/9/19	high

偵測

搜尋 Plugin

high

high

high

high

medium

high