The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Fix insn_aux_data leak on verifier err_free_env path When bpf_check() allocates env->insn_aux_data     successfully but later fails to allocate env->succ, it jumps directly to err_free_env. The existing     vfree(env->insn_aux_data) sits before the err_free_env label, so that direct jump bypasses it and leaks     insn_aux_data. Move vfree(env->insn_aux_data) into err_free_env so all early and late exit paths release     it consistently. (CVE-2026-72401)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-72401

high Nessus Plugin ID 337768

Version 1.3

Version 1.2

Version 1.3 Aug 19, 2026, 11:27 AM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608191127
Version 1.2 Aug 19, 2026, 6:09 AM Detection (updated detection logic) New Plugin metadata Plugin Feed: 202608190609