The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Clear rb node linkage when freeing bpf_rb_root bpf_rb_root_free() detaches the root by copying the     current rb_root_cached and then replacing the live root with RB_ROOT_CACHED. It then walks the copied root     and drops each object contained in the tree. This leaves the rb node state intact while dropping the     object. If the object is refcounted and survives the drop, its bpf_rb_node_kern still contains an owner     pointer to the freed root and stale rb tree linkage. If a later bpf_rb_root allocation reuses the same     address, bpf_rbtree_remove() can incorrectly pass the owner check and call rb_erase_cached() on a node     whose rb pointers belong to the old tree. Mirror the list draining behavior by marking nodes as busy while     the root is being detached, then clear the rb node and release the owner before dropping the containing     object. This makes surviving nodes unowned and safe to reject from remove or accept for a later add.
    (CVE-2026-74344)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
335527	Linux Distros Unpatched Vulnerability : CVE-2026-74344	Nessus	Misc.	8/15/2026	8/28/2026	high
341880	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/9/2026	high
341899	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/9/2026	medium

Detections

Analytics

Plugins Search

high

high

medium