The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs     before idr_alloc The KFD CRIU restore flow restores previously saved object IDs from userspace. For event     restore: kfd_criu_restore_event() -> create_signal_event() / create_other_event() ->     allocate_event_notification_slot() -> idr_alloc(..., *restore_id, *restore_id + 1, ...) For BO restore:
    criu_restore_memory_of_gpu() -> idr_alloc(..., bo_priv->idr_handle, ...) In both cases, the restored ID     comes from userspace-provided CRIU data. idr_alloc() expects the ID range values to fit within signed int     limits. If a restored ID is larger than INT_MAX, it can trigger a WARN in the IDR layer. A kernel WARN is     undesirable because it prints a warning trace and may cause a panic or reboot on systems with     panic_on_warn enabled. Smatch reported these paths as allowing unchecked userspace values to reach     idr_alloc(). Add INT_MAX validation before using restored IDs in: - kfd_criu_restore_event() -     criu_restore_memory_of_gpu() If the restored ID is invalid, return -EINVAL. This prevents invalid restore     data from reaching the IDR layer and avoids WARN-triggering paths, while keeping valid restore behavior     unchanged. (CVE-2026-80870)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-80870

medium Nessus Plugin ID 343443

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Oct 14, 2026, 9:52 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610140952
Version 1.3 Oct 7, 2026, 6:12 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2026-80870, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070612
Version 1.2 Sep 8, 2026, 12:57 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609080057
Version 1.1 Sep 7, 2026, 2:57 PM New Plugin Feed: 202609071457