The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN     even when it carries no data. In that case the child socket's receive queue is intentionally left empty.
    mptcp_fastopen_subflow_synack_set_params() set is_mptfo before checking for queued SYN data. That made     data-less TFO SYNs hit a WARN and, if the warning was non-fatal, left stale MPTFO state behind. The stale     flag could later trigger a state-confusion bug in check_fully_established(). Only mark the subflow as     MPTFO after confirming that an SKB was queued. Return quietly when the receive queue is empty. Note that     mptcp_subflow_context's is_mptfo field is now not just about subflows where the TFO was present, but about     MPTFO subflow that consumed SYN data. Only having a valid cookie but not carrying data is not really     doing TFO. (CVE-2026-80585)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80585

critical Nessus Plugin ID 340773

Version 1.4