In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Commit e057b9477232 ("arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates") attempted to resolve a long-standing issue with syscall entry tracing, where a tracer is able to manipulate the first syscall argument without being subjected to seccomp or audit checking. Unfortunately, that fix was incomplete [1], as it failed to update 'orig_x0' between a tracer updating x0 during a seccomp ptrace exit (SECCOMP_RET_TRACE) and the seccomp filter being re-evaluated. Rather than add hooks to the core seccomp code, instead move the synchronisation code into the ptrace GPR and syscall setting code so that 'orig_x0' is kept up to date with x0 whenever we're stopped on the syscall entry path.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Commit e057b9477232 (arm64: syscall:
    Ensure saved x0 is kept in-sync with tracer updates) attempted to resolve a long-standing issue with     syscall entry tracing, where a tracer is able to manipulate the first syscall argument without being     subjected to seccomp or audit checking. Unfortunately, that fix was incomplete [1], as it failed to update     'orig_x0' between a tracer updating x0 during a seccomp ptrace exit (SECCOMP_RET_TRACE) and the seccomp     filter being re-evaluated. Rather than add hooks to the core seccomp code, instead move the     synchronisation code into the ptrace GPR and syscall setting code so that 'orig_x0' is kept up to date     with x0 whenever we're stopped on the syscall entry path. (CVE-2026-90347)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
347799	Linux Distros Unpatched Vulnerability : CVE-2026-90347	Nessus	Misc.	Local	high
345814	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2143)	Nessus	Amazon Linux Local Security Checks	Local	medium
341859	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-130)	Nessus	Amazon Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2026-90347

high

Tenable Plugins

high

medium

high