In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()
    get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs
    to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use
    rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles
    and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-620.el9 build changelog.

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()     get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs     to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use     rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles     and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of     has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an     oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed     a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make     has_locked_children() a wrapper for __has_locked_children(), calling the latter under     read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on     unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the     caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()     get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs     to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use     rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles     and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
452281	Google: sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19165.0.0	Tenable Cloud Security	Google COS Security Checks	Local	medium
452281	Google: sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19165.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	medium
266320	CentOS 9 : kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	Local	medium
244283	Linux Distros Unpatched Vulnerability : CVE-2024-46801	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2024-46801

medium

Tenable Plugins

medium

medium

medium

medium