The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fuse: publish io-uring queues with release semantics fuse_uring_create_queue() initializes a     fuse_ring_queue and then publishes the pointer into ring->queues[qid] with WRITE_ONCE() under the     fch->lock. There are several readers that may concurrently be fetching that pointer locklessly and then     deferencing it. WRITE_ONCE() doesn't ensure ordering of the queue's field initialization before the     ring->queues[qid] pointer assignment. The queue must be published with smp_store_release() so the field     initialization is guaranteed to happen before. Readers in paths where the read may happen concurrently     with the store need to use READ_ONCE() because any race involving a plain access is undefined.
    (CVE-2026-80858)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
365283	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3187)	Nessus	Amazon Linux Local Security Checks	10/12/2026	10/26/2026	medium
342995	Linux Distros Unpatched Vulnerability : CVE-2026-80858	Nessus	Misc.	9/4/2026	9/23/2026	high

Detections

Analytics

Plugins Search

medium

high