The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN     even when it carries no data. In that case the child socket's receive queue is intentionally left empty.
    mptcp_fastopen_subflow_synack_set_params() set is_mptfo before checking for queued SYN data. That made     data-less TFO SYNs hit a WARN and, if the warning was non-fatal, left stale MPTFO state behind. The stale     flag could later trigger a state-confusion bug in check_fully_established(). Only mark the subflow as     MPTFO after confirming that an SKB was queued. Return quietly when the receive queue is empty. Note that     mptcp_subflow_context's is_mptfo field is now not just about subflows where the TFO was present, but about     MPTFO subflow that consumed SYN data. Only having a valid cookie but not carrying data is not really     doing TFO. (CVE-2026-80585)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80585

critical Nessus Plugin ID 340773

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Sep 10, 2026, 3:20 PM CVSS metrics ("CVSSv2 score" set to 9.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv3 score source (changed from "CVE-2026-80585" to none) Plugin Feed: 202609101520
Version 1.6 Sep 4, 2026, 7:34 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv3 score source (set to "CVE-2026-80585") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609040734
Version 1.5 Sep 1, 2026, 11:39 AM CVSS metrics ("CVSSv2 score" set to 9.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv3 score source (changed from "CVE-2026-80585" to none) Plugin Feed: 202609011139
Version 1.4 Aug 31, 2026, 10:57 PM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv3 score source (set to "CVE-2026-80585") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 28, 2026, 12:16 PM CVSS metrics ("CVSSv2 score" set to 9.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSSv3 score source (changed from "CVE-2026-80585" to none) Plugin Feed: 202608281216
Version 1.2 Aug 27, 2026, 3:41 PM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS metrics ("CVSSv3 score" set to 9.4) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv3 score source (set to "CVE-2026-80585") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608271541
Version 1.1 Aug 27, 2026, 5:05 AM New Plugin Feed: 202608270505