The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN     reports a use-after-free Write in srpt_refresh_port(). This seems to be because an event handler is     registered before the srpt device is fully setup and a race condition upon error may leave a partially     setup event handler in place. Instead, only register the event handler after srpt device initialization is     complete. (CVE-2024-26872)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-26872

medium Nessus Plugin ID 228221

Version 1.2

Version 1.1

Version 1.2 Aug 6, 2025, 4:52 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508060452
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723