The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bpf_tcp_gen_syncookie and     bpf_tcp_check_syncookie accept a socket pointer 'sk' with argument type ARG_PTR_TO_BTF_ID_SOCK_COMMON.
    However, they access sk->sk_protocol without validating whether 'sk' represents a full socket. Fix this     issue by checking sk->sk_state != TCP_LISTEN before inspecting sk->sk_protocol in both     bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie. Since mini-sockets are never in the TCP_LISTEN state,     the condition short-circuits and prevents dereferencing fullsock-specific fields. (CVE-2026-80738)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80738

high Nessus Plugin ID 342755

Version 1.2

Version 1.1

Version 1.2 Sep 5, 2026, 1:14 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L") CVSSv2 severity (based on CVE-2026-80738, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609051314
Version 1.1 Sep 4, 2026, 12:58 PM New Plugin Feed: 202609041258