The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nf_conntrack_expect: use conntrack GC to reap expectations This patch replaces the timer API by     GC worker approach for expectations, as it already happened in many other subsystems. Use the existing     conntrack GC worker to iterate over the local list of expectations in the master conntrack to reap expired     expectations. Check IPS_HELPER_BIT to run GC for expectations, set it on for nft_ct expectation which     nevers sets it. Hold the expectation spinlock while iterating over the master conntrack expectation list     to synchronize with nf_ct_remove_expectations(). This also performs runtime packet path garbage collection     through the expectation insertion and lookup functions while walking over one of the chains of the global     expectation hashtables. Unconfirmed conntrack entries are skipped since ct->ext can be reallocated and     dying are skipped since those will be gone soon. Set on IPS_HELPER_BIT if the helper ct extension is     added, then the new GC worker does not need to bump the ct refcount to check if the ct->ext helper is     available. This removes the extra bump on the refcount for expectation timers, this allows to remove     several nf_ct_expect_put() calls after the unlink, after this update only refcount remains at 1 while on     the expectation hashes. This patch implicitly addresses a race with the existing timer API allowing an     expectation to access a stale exp->master pointer which has been already released when expectation removal     loses races with an expiring timer, ie. timer_del() reporting false. Add a new NF_CT_EXPECT_DEAD flag to     reap this expectation via GC. This is needed by nf_conntrack_unexpect_related() which is called in error     paths to invalidate newly created expectations that has been added into the hashes. These expectactions     cannot be inmediately released as GC or nf_ct_remove_expectations() could race to make it. On expectation     insert, the runtime GC reaps stale expectations before checking the expectation limit set by policy. Set     current timestamp in nf_ct_expect_alloc(), then add the expectation policy timeout (or custom timeout     specified added on top of this) to specify the expectation lifetime. (CVE-2026-80668)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80668

critical Nessus Plugin ID 341328

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.6 Sep 16, 2026, 6:23 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2026-80668, severity increased from "Medium" to "High") Plugin Feed: 202609161823
Version 1.5 Sep 4, 2026, 7:34 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609040734
Version 1.4 Sep 2, 2026, 12:19 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609020019
Version 1.2 Sep 1, 2026, 5:14 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSSv2 severity (based on CVE-2026-80668, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609010514
Version 1.1 Aug 29, 2026, 12:30 AM New Plugin Feed: 202608290030