The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 (bpf: Fix oob     access in cgroup local storage) is still incomplete. The prog-array compatibility check treats a program     with no cgroup storage as compatible with any stored storage cookie. This allows a storage-less program to     bridge a tail call chain between an entry program and a storage-using callee even though cgroup local     storage at runtime still follows the caller's context, that is, A -> B(no storage) -> C(storage) path.
    Requiring exact cookie equality would break the legitimate case of a storage-less leaf program being tail     called from a storage-using one. Instead, only accept a zero storage cookie if the program cannot perform     tail calls itself. This keeps A -> B(no storage) working while rejecting the A -> B(no storage) ->     C(storage) bridge. (CVE-2026-74305)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-74305

high Nessus Plugin ID 337358

Version 1.2

Version 1.1

Version 1.2 Aug 19, 2026, 10:20 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-74305, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608192220
Version 1.1 Aug 19, 2026, 6:09 AM New Plugin Feed: 202608190609