The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error     handling in IIO_BUFFER_GET_FD_IOCTL If we fail to copy the just created file descriptor to userland, we     try to clean up by putting back 'fd' and freeing 'ib'. The code uses put_unused_fd() for the former which     is wrong, as the file descriptor was already published by fd_install() which gets called internally by     anon_inode_getfd(). This makes the error handling code leaving a half cleaned up file descriptor table     around and a partially destructed 'file' object, allowing userland to play use-after-free tricks on us, by     abusing the still usable fd and making the code operate on a dangling 'file->private_data' pointer.
    Instead of leaving the kernel in a partially corrupted state, don't attempt to explicitly clean up and     leave this to the process exit path that'll release any still valid fds, including the one created by the     previous call to anon_inode_getfd(). Simply return -EFAULT to indicate the error. (CVE-2022-48801)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-48801

high Nessus Plugin ID 225674

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.1

Version 1.7 Oct 30, 2026, 8:32 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610300832
Version 1.6 Jul 18, 2026, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.4 Sep 5, 2025, 4:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509051638
Version 1.3 Sep 2, 2025, 6:30 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635