The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to     xfrm_decode_session(). That hook may return an error, but security_skb_classify_flow() calls it from a     void path and triggers BUG_ON() if an error is returned. Disable BPF attachment to the hook to prevent a     BPF LSM program from turning packet classification into a full panic. (CVE-2026-80669)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
337226	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2058)	Nessus	Amazon Linux Local Security Checks	8/18/2026	9/10/2026	high
341880	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	Nessus	Amazon Linux Local Security Checks	8/31/2026	9/15/2026	high
341312	Linux Distros Unpatched Vulnerability : CVE-2026-80669	Nessus	Misc.	8/28/2026	9/2/2026	medium
337239	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2057)	Nessus	Amazon Linux Local Security Checks	8/18/2026	9/10/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high