The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler     calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called     personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually     result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot     by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called.
    Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux. The bypass is     similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1]. The PoC: $ cat >     test.c int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create,     test, 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned     int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old);
    syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page     exists even if W^X policy is enforced int fd = open(/proc/self/maps, O_RDONLY); unsigned char     buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); }     close(fd); } $ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050     /memfd:test (deleted) [PM: subject line tweaks] (CVE-2024-47745)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-47745

high Nessus Plugin ID 228789

Version 1.8

Version 1.7

Version 1.5

Version 1.4

Version 1.1

Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.7 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.5 Sep 1, 2025, 10:01 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509012201
Version 1.4 Aug 22, 2025, 7:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508220729
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723