The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_pages     is the total contiguous backing allocation, i.e., nr_units * pcpu_unit_pages, but pcpu_chunk_populated()     uses it to set chunk->populated, whose size is pcpu_unit_pages, bitmap. Since bit N in chunk->populated     means page offset N inside every unit is backed. When nr_units > 1, the function writes beyond     chunk->populated. Fix it by using chunk->nr_pages. It also fixes the global pcpu_nr_empty_pop_pages     accounting, since pcpu_balance_free() only iterates up to chunk->nr_pages. Commit a63d4ac4ab609 (percpu:
    make percpu-km set chunk->populated bitmap properly) introduced the bitmap overflow issue. Later, commit     b539b87fed37f (percpu: implmeent pcpu_nr_empty_pop_pages and chunk->nr_populated) added     pcpu_nr_empty_pop_pages and caused the accounting issue. (CVE-2026-80718)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80718

high Nessus Plugin ID 341304

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Sep 16, 2026, 6:23 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-80718, severity decreased from "High" to "Medium") Plugin Feed: 202609161823
Version 1.5 Sep 9, 2026, 2:39 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090239
Version 1.4 Sep 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.3 Sep 2, 2026, 12:19 AM Detection (updated detection logic) Plugin Feed: 202609020019
Version 1.2 Sep 1, 2026, 5:14 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609010514
Version 1.1 Aug 29, 2026, 12:30 AM New Plugin Feed: 202608290030