The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - perf sched: Fix register_pid() overflow, strcpy, and BUG_ON register_pid() has several issues when     processing untrusted perf.data: 1. Integer overflow: (pid + 1) * sizeof(struct task_desc *) can wrap to a     small value on 32-bit systems when pid is large (e.g. 0x40000000), causing realloc to return a tiny buffer     followed by out-of-bounds writes in the initialization loop. 2. Heap buffer overflow: strcpy(task->comm,     comm) copies the untrusted comm string into a fixed 20-byte COMM_LEN buffer with no length check. 3.
    BUG_ON on allocation failure: perf.data is untrusted input, so allocation failures should be handled     gracefully rather than killing the process. 4. Realloc of sched->tasks assigned directly back, leaking the     old pointer on failure; nr_tasks incremented before the realloc, leaving corrupted state on failure. Cap     pid at PID_MAX_LIMIT (4194304, matching the kernel's maximum on 64-bit), replace strcpy with strlcpy,     guard against NULL comm, replace BUG_ON with NULL returns using safe realloc patterns, and add NULL checks     in callers that dereference the result. (CVE-2026-80671)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80671

critical Nessus Plugin ID 341275

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Sep 16, 2026, 6:23 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-80671, severity increased from "Low" to "High") Plugin Feed: 202609161823
Version 1.3 Sep 2, 2026, 11:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609022339
Version 1.2 Sep 1, 2026, 5:14 AM CVSS metrics ("CVSSv2 score" set to 3.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P") CVSS metrics ("CVSSv3 score" set to 9.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2026-80671, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609010514
Version 1.1 Aug 29, 2026, 12:30 AM New Plugin Feed: 202608290030