The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays each dirty region     described by a buffer log item's bitmap into the buffer read for that item: memcpy(xfs_buf_offset(bp,     (uint)bit << XFS_BLF_SHIFT), item->ri_buf[i].iov_base, nbits << XFS_BLF_SHIFT); The destination offset     (bit/nbits, from the logged dirty bitmap) and the buffer size (from the logged blf_len) are both attacker-     controlled and otherwise unrelated, yet the only thing bounding the copy is an ASSERT(), which compiles     away on production kernels. A crafted image logging a small blf_len together with a bitmap bit past the     end of that buffer drives the memcpy() past the buffer's allocation, corrupting adjacent kernel heap     during mount-time log recovery. This is reachable by anyone who can get a crafted image mounted -- the     malicious-filesystem threat model XFS already guards against elsewhere. Turn the ASSERT() into a real     XFS_IS_CORRUPT() check that aborts recovery of the buffer with -EFSCORRUPTED, consistent with the     validate-and-fail idiom already used in xlog_recover_do_inode_buffer() and xfs_dquot_item_recover.c.
    xlog_recover_do_reg_buffer() therefore becomes STATIC int and its three callers propagate the error. Found     and confirmed with KASAN on a CONFIG_XFS_DEBUG=n build: the crafted image trips a slab-out-of-bounds write     before this change and fails recovery cleanly with -EFSCORRUPTED after it. (CVE-2026-80536)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80536

high Nessus Plugin ID 340712

Version 1.2

Version 1.1

Version 1.2 Aug 27, 2026, 5:05 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2026-80536, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608270505
Version 1.1 Aug 26, 2026, 11:45 PM New Plugin Feed: 202608262345