There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and
    cgroup backward compat BPF_PROG_QUERY writes back the 'query.revision' field unconditionally to userspace.
    If userspace passes a smaller 'bpf_attr' structure (e.g. 40 bytes, which was the layout before the
    addition of 'query.revision'), the kernel performs an out-of-bounds write. Fix this by propagating the
    user-provided attribute size 'uattr_size' down to the cgroup query handlers, and conditionally skipping
    writing the revision field to userspace when the provided buffer size is insufficient. query.revision in
    bpf_mprog_query is structurally identical to the cgroup case: a late tail field, written unconditionally.
    But the backward-compat hazard is not the same. The min-historical-size test is per command, and
    bpf_mprog_query only serves attach types that were born with revision in the struct: - tcx_prog_query ->
    BPF_TCX_INGRESS/EGRESS - netkit_prog_query -> BPF_NETKIT_PRIMARY/PEER tcx, netkit, the revision field, and
    bpf_mprog_query itself all landed in the same v6.6 merge window (053c8e1f235d added the mprog query API +
    revision; tcx in e420bed02507, netkit in 35dfaad7188c). There has never been a tcx/netkit BPF_PROG_QUERY
    userspace that doesn't know about revision. So for these commands the minimum legitimate struct already
    covers offset 56-64 — no old binary can be broken here. Contrast with cgroup: BPF_PROG_QUERY on cgroup
    attach types shipped in 2017; revision write-back was bolted on years later (120933984460). That path has
    a real population of pre-revision callers. (CVE-2026-74371)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and     cgroup backward compat BPF_PROG_QUERY writes back the 'query.revision' field unconditionally to userspace.
    If userspace passes a smaller 'bpf_attr' structure (e.g. 40 bytes, which was the layout before the     addition of 'query.revision'), the kernel performs an out-of-bounds write. Fix this by propagating the     user-provided attribute size 'uattr_size' down to the cgroup query handlers, and conditionally skipping     writing the revision field to userspace when the provided buffer size is insufficient. query.revision in     bpf_mprog_query is structurally identical to the cgroup case: a late tail field, written unconditionally.
    But the backward-compat hazard is not the same. The min-historical-size test is per command, and     bpf_mprog_query only serves attach types that were born with revision in the struct: - tcx_prog_query ->     BPF_TCX_INGRESS/EGRESS - netkit_prog_query -> BPF_NETKIT_PRIMARY/PEER tcx, netkit, the revision field, and     bpf_mprog_query itself all landed in the same v6.6 merge window (053c8e1f235d added the mprog query API +     revision; tcx in e420bed02507, netkit in 35dfaad7188c). There has never been a tcx/netkit BPF_PROG_QUERY     userspace that doesn't know about revision. So for these commands the minimum legitimate struct already     covers offset 56-64  no old binary can be broken here. Contrast with cgroup: BPF_PROG_QUERY on cgroup     attach types shipped in 2017; revision write-back was bolted on years later (120933984460). That path has     a real population of pre-revision callers. (CVE-2026-74371)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
472121	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Cloud Security	Google COS Security Checks	10/3/2026	10/6/2026	high
472121	Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.21	Tenable Self-Hosted Container Security	Google COS Security Checks	10/3/2026	10/6/2026	high
337412	Linux Distros Unpatched Vulnerability : CVE-2026-74371	Nessus	Misc.	8/18/2026	10/23/2026	high
365768	Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium
341880	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/15/2026	high
365767	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8887-1)	Nessus	Ubuntu Local Security Checks	10/14/2026	10/14/2026	medium
365463	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8889-1)	Nessus	Ubuntu Local Security Checks	10/13/2026	10/13/2026	medium

Detections

Analytics

Plugins Search

high

high

high

medium

high

medium

medium