In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request.

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35792 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in     unprepare The unprepare call must be carried out before the finalize call as the latter can free the     request. (CVE-2024-35792)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in     unprepare The unprepare call must be carried out before the finalize call as the latter can free the     request. (CVE-2024-35792)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
295898	Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35792)	Nessus	Azure Linux Local Security Checks	high
246784	Linux Distros Unpatched Vulnerability : CVE-2024-35792	Nessus	Misc.	high
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	high

Detections

Analytics

CVE-2024-35792

high

Tenable Plugins

high

high

high