The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdp_rxq_info_reg() or     xdp_rxq_info_reg_mem_model() fails, the driver rolls back the changes. However, the rollback loop: for     (i--; i >= start; i--) { decrements the loop index 'i' before the first iteration. This correctly skips     unregistering the rxq for the failed index 'i' (as registration failed or was already cleaned up), but it     also erroneously skips calling netif_napi_deli() for rq[i].xdp_napi. Since netif_napi_add() was already     called for index 'i', this leaves a dangling napi_struct in the device's napi_list. When the veth device     is later destroyed, the freed queue memory (which contains the leaked NAPI structure) can be reused. The     subsequent device teardown iterates the NAPI list and corrupts the reallocated memory, leading to UAF. Fix     this by explicitly deleting the NAPI association for the failed index 'i' before rolling back the     successfully configured queues. (CVE-2026-80613)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80613

high Nessus Plugin ID 342016

Version 1.12

Version 1.11

Version 1.9

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.12 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610121219
Version 1.11 Oct 10, 2026, 5:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610100524
Version 1.9 Oct 9, 2026, 2:01 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
Version 1.7 Oct 8, 2026, 7:54 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202610080754
Version 1.6 Oct 7, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070612
Version 1.5 Oct 7, 2026, 12:45 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070045
Version 1.4 Sep 2, 2026, 11:53 AM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") Plugin Feed: 202609021153
Version 1.3 Sep 2, 2026, 12:19 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609020019
Version 1.1 Sep 1, 2026, 5:14 AM New Plugin Feed: 202609010514