The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing     over to PTP worker When reading the timestamp is required bnxt_tx_int() hands over the ownership of the     completed skb to the PTP worker. The skb should not be used afterwards, as the worker may run before the     rest of our code and free the skb, leading to a use-after-free. Since dev_kfree_skb_any() accepts NULL     make the loss of ownership more obvious and set skb to NULL. (CVE-2022-48637)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-48637

high Nessus Plugin ID 225322

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.1

Version 1.7 Apr 23, 2026, 4:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604230431
Version 1.6 Nov 21, 2025, 2:12 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.4 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509061955
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635