The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrfs: do not double complete bio on errors during compressed reads I hit some weird panics while fixing     up the error handling from btrfs_lookup_bio_sums(). Turns out the compression path will complete the bio     we use if we set up any of the compression bios and then return an error, and then btrfs_submit_data_bio()     will also call bio_endio() on the bio. Fix this by making btrfs_submit_compressed_read() responsible for     calling bio_endio() on the bio if there are any errors. Currently it was only doing it if we created the     compression bios, otherwise it was depending on btrfs_submit_data_bio() to do the right thing. This     creates the above problem, so fix up btrfs_submit_compressed_read() to always call bio_endio() in case of     an error, and then simply return from btrfs_submit_data_bio() if we had to call     btrfs_submit_compressed_read(). (CVE-2022-49167)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49167

medium Nessus Plugin ID 225586

Version 1.2

Version 1.1

Version 1.2 Aug 7, 2025, 10:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508071003
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635