The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real_dev. That can     not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following:
    ================================================================== BUG: KASAN: use-after-free in     macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70     drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637 default_operstate     net/core/link_watch.c:42 [inline] rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54     linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161 Allocated by task 22209: ...
    alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235     veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748 Freed by task 8: ... kfree+0xd6/0x4d0 mm/slub.c:4552     kvfree+0x42/0x50 mm/util.c:615 device_release+0x9f/0x240 drivers/base/core.c:2229 kobject_cleanup     lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65     [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327 After     commit faab39f63c1f (net: allow out-of-order netdev unregistration) and commit e5f80fcf869a (ipv6: give     an IPv6 dev to blackhole_netdev), we can add dev_hold_track() in macsec_dev_init() and dev_put_track() in     macsec_free_netdev() to fix the problem. (CVE-2022-49390)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49390

high Nessus Plugin ID 225410

Version 1.19

Version 1.18

Version 1.17

Version 1.16

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.1

Version 1.19 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.18 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.17 Jan 7, 2026, 1:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601071359
Version 1.16 Dec 20, 2025, 11:42 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512201142
Version 1.15 Dec 18, 2025, 1:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512180127
Version 1.14 Dec 17, 2025, 4:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512171656
Version 1.13 Dec 15, 2025, 11:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512151132
Version 1.12 Dec 12, 2025, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512120906
Version 1.11 Dec 12, 2025, 12:11 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512120011
Version 1.10 Dec 5, 2025, 1:34 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512051334
Version 1.9 Dec 4, 2025, 7:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512041943
Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.7 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635