In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying the current rb_root_cached and then replacing the live root with RB_ROOT_CACHED. It then walks the copied root and drops each object contained in the tree. This leaves the rb node state intact while dropping the object. If the object is refcounted and survives the drop, its bpf_rb_node_kern still contains an owner pointer to the freed root and stale rb tree linkage. If a later bpf_rb_root allocation reuses the same address, bpf_rbtree_remove() can incorrectly pass the owner check and call rb_erase_cached() on a node whose rb pointers belong to the old tree. Mirror the list draining behavior by marking nodes as busy while the root is being detached, then clear the rb node and release the owner before dropping the containing object. This makes surviving nodes unowned and safe to reject from remove or accept for a later add.

ubuntu_linux USN-8888-1: Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when
    freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying the current rb_root_cached and then
    replacing the live root with RB_ROOT_CACHED. It then walks the copied root and drops each object contained
    in the tree. This leaves the rb node state intact while dropping the object. If the object is refcounted
    and survives the drop, its bpf_rb_node_kern still contains an owner pointer to the freed root and stale rb
    tree linkage. If a later bpf_rb_root allocation reuses the same address, bpf_rbtree_remove() can
    incorrectly pass the owner check and call rb_erase_cached() on a node whose rb pointers belong to the old
    tree. Mirror the list draining behavior by marking nodes as busy while the root is being detached, then
    clear the rb node and release the owner before dropping the containing object. This makes surviving nodes
    unowned and safe to reject from remove or accept for a later add. (CVE-2026-74344)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying the     current rb_root_cached and then replacing the live root with RB_ROOT_CACHED. It then walks the copied root     and drops each object contained in the tree. This leaves the rb node state intact while dropping the     object. If the object is refcounted and survives the drop, its bpf_rb_node_kern still contains an owner     pointer to the freed root and stale rb tree linkage. If a later bpf_rb_root allocation reuses the same     address, bpf_rbtree_remove() can incorrectly pass the owner check and call rb_erase_cached() on a node     whose rb pointers belong to the old tree. Mirror the list draining behavior by marking nodes as busy while     the root is being detached, then clear the rb node and release the owner before dropping the containing     object. This makes surviving nodes unowned and safe to reject from remove or accept for a later add.
    (CVE-2026-74344)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
470458	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Cloud Security	Google COS Security Checks	Local	high
470458	Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
341899	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)	Nessus	Amazon Linux Local Security Checks	Local	medium
341880	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	Nessus	Amazon Linux Local Security Checks	Local	high
335527	Linux Distros Unpatched Vulnerability : CVE-2026-74344	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-74344

high

Tenable Plugins

Coming Soon

high

high

medium

high

high