The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tcp: clamp route advmss to TCP_MIN_MSS tcp_select_initial_window() assumes that callers never pass an MSS     smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit     RTAX_ADVMSS is one way to get there, but it is not the only one. The same divide-by-zero can also be     reached through the default advmss path when RTAX_ADVMSS is left at 0 and the effective advmss is later     driven down by route MTU and min_adv_mss. Introduce a tcp_dst_advmss() helper that clamps route advmss to     TCP_MIN_MSS before TCP consumes it, and use it in the TCP paths that derive advmss from dst metrics. This     keeps the effective MSS from dropping to zero before tcp_select_initial_window() rounds the receive     window. (CVE-2026-80847)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80847

medium Nessus Plugin ID 342973

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Sep 17, 2026, 1:14 AM Detection (updated detection logic) Plugin Feed: 202609170114
Version 1.3 Sep 11, 2026, 11:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609111101
Version 1.2 Sep 7, 2026, 2:57 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2026-80847, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609071457
Version 1.1 Sep 5, 2026, 7:40 AM New Plugin Feed: 202609050740