The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table(), array     adev->pm.dpm.ps and its member is allocated. If the allocation of each member fails, the array itself is     freed and returned with an error code. However, the array is later freed again in si_dpm_fini() function     which is called when the function returns an error. This leads to potential double free of the array     adev->pm.dpm.ps, as well as leak of its array members, since the members are not freed in the allocation     function and the array is not nulled when freed. In addition adev->pm.dpm.num_ps, which keeps track of the     allocated array member, is not updated until the member allocation is successfully finished, this could     also lead to either use after free, or uninitialized variable access in si_dpm_fini(). Fix this by     postponing the free of the array until si_dpm_fini() and increment adev->pm.dpm.num_ps everytime the array     member is allocated. (CVE-2022-49530)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49530

high Nessus Plugin ID 226844

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 21, 2025, 7:41 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508210741
Version 1.2 Aug 7, 2025, 1:00 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508070100
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723