The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback The list_for_each_entry_safe()     macro saves the current item (n) and the item after (n+1), so that n can be safely removed without     corrupting the list. However, when traversing the list and removing items using gadget giveback, the DWC3     lock is briefly released, allowing other routines to execute. There is a situation where, while items are     being removed from the cancelled_list using dwc3_gadget_ep_cleanup_cancelled_requests(), the pullup     disable routine is running in parallel (due to UDC unbind). As the cleanup routine removes n, and the     pullup disable removes n+1, once the cleanup retakes the DWC3 lock, it references a request who was     already removed/handled. With list debug enabled, this leads to a panic. Ensure all instances of the macro     are replaced where gadget giveback is used. Example call stack: Thread#1: __dwc3_gadget_ep_set_halt() -     CLEAR HALT -> dwc3_gadget_ep_cleanup_cancelled_requests() ->list_for_each_entry_safe()
    ->dwc3_gadget_giveback(n) ->dwc3_gadget_del_and_unmap_request()- n deleted[cancelled_list] ->spin_unlock
    ->Thread#2 executes ... ->dwc3_gadget_giveback(n+1) ->Already removed! Thread#2: dwc3_gadget_pullup()
    ->waiting for dwc3 spin_lock ... ->Thread#1 released lock ->dwc3_stop_active_transfers()
    ->dwc3_remove_requests() ->fetches n+1 item from cancelled_list (n removed by Thread#1)
    ->dwc3_gadget_giveback() ->dwc3_gadget_del_and_unmap_request()- n+1 deleted[cancelled_list] ->spin_unlock     (CVE-2022-49398)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49398

medium Nessus Plugin ID 225154

Version 1.7

Version 1.6

Version 1.3

Version 1.1

Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.6 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.3 Aug 27, 2025, 8:29 AM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508270829
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635