The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for     BPF_TRAMP_F_CALL_ORIG When BPF_TRAMP_F_CALL_ORIG is set, the trampoline calls __bpf_tramp_enter() and
    __bpf_tramp_exit() functions, passing them the struct bpf_tramp_image *im pointer as an argument in R0.
    The trampoline generation code uses emit_addr_mov_i64() to emit instructions for moving the     bpf_tramp_image address into R0, but emit_addr_mov_i64() assumes the address to be in the vmalloc() space     and uses only 48 bits. Because bpf_tramp_image is allocated using kzalloc(), its address can use more than     48-bits, in this case the trampoline will pass an invalid address to __bpf_tramp_enter/exit() causing a     kernel crash. Fix this by using emit_a64_mov_i64() in place of emit_addr_mov_i64() as it can work with     addresses that are greater than 48-bits. (CVE-2024-43840)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-43840

medium Nessus Plugin ID 229363

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.5 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509061955
Version 1.4 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.3 Sep 2, 2025, 6:30 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723