The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable synproxy_tstamp_adjust() rewrites the TCP     timestamp option in place and then patches the TCP checksum via inet_proto_csum_replace4() on the caller-     supplied tcphdr pointer. Both ipv4_synproxy_hook() and ipv6_synproxy_hook() obtain that pointer with     skb_header_pointer() before calling in, so it may either alias skb->head directly or point at the caller's     on-stack _tcph buffer. Between obtaining the pointer and using it, the function calls     skb_ensure_writable(skb, optend), which on a cloned or non-linear skb invokes pskb_expand_head() and frees     the old skb->head. After that point the cached th is stale: caller (ipv[46]_synproxy_hook) th =     skb_header_pointer(skb, ..., &_tcph) synproxy_tstamp_adjust(skb, protoff, th, ...)     skb_ensure_writable(skb, optend) pskb_expand_head() /* kfree(old skb->head) */ ...
    inet_proto_csum_replace4(&th->check, ...) /* writes into freed head, or into the caller's stack copy     leaving the on-wire checksum stale */ The option bytes are written through skb->data and are fine; only     the checksum update goes through th and so lands in the wrong place. The result is either a write into     freed slab memory or a packet leaving with a checksum that does not match its payload. Fix by re-deriving     th from skb->data + protoff immediately after skb_ensure_writable() succeeds, so the subsequent checksum     update targets the linear, writable header. (CVE-2026-64007)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
322087	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1881)	Nessus	Amazon Linux Local Security Checks	6/22/2026	7/31/2026	medium
325574	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-124 (ALASKERNEL-5.10-2026-124)	Nessus	Amazon Linux Local Security Checks	7/8/2026	7/31/2026	high
328121	Linux Distros Unpatched Vulnerability : CVE-2026-64007	Nessus	Misc.	7/20/2026	7/29/2026	critical
322944	Photon OS 5.0: Linux PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	6/26/2026	8/1/2026	high
328499	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-110 (ALASKERNEL-5.15-2026-110)	Nessus	Amazon Linux Local Security Checks	7/20/2026	7/31/2026	medium
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	7/24/2026	7/28/2026	high
327380	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1924)	Nessus	Amazon Linux Local Security Checks	7/16/2026	7/31/2026	medium
328493	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1968)	Nessus	Amazon Linux Local Security Checks	7/20/2026	7/31/2026	high

Detections

Analytics

Plugins Search

medium

high

critical

high

medium

high

medium

high