The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuses where a     BPF tracing program deletes elements from a sockmap/sockhash map. Because BPF tracing programs can be     invoked from any interrupt context, locks taken during a map_delete_elem operation must be hardirq-safe.
    Otherwise a deadlock due to lock inversion is possible, as reported by lockdep: CPU0 CPU1 ---- ----     lock(&htab->buckets[i].lock); local_irq_disable(); lock(&host->lock); lock(&htab->buckets[i].lock);
    <Interrupt> lock(&host->lock); Locks in sockmap are hardirq-unsafe by design. We expects elements to be     deleted from sockmap/sockhash only in task (normal) context with interrupts enabled, or in softirq     context. Detect when map_delete_elem operation is invoked from a context which is _not_ hardirq-unsafe,     that is interrupts are disabled, and bail out with an error. Note that map updates are not affected by     this issue. BPF verifier does not allow updating sockmap/sockhash from a BPF tracing program today.
    (CVE-2024-35895)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-35895

medium Nessus Plugin ID 229588

Version 1.14

Version 1.13

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.4

Version 1.3

Version 1.1

Version 1.14 Feb 7, 2026, 12:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070050
Version 1.13 Feb 4, 2026, 8:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602042043
Version 1.11 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin Feed: 202601130235
Version 1.10 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.9 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.8 Oct 27, 2025, 3:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510271515
Version 1.4 Sep 2, 2025, 6:30 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.3 Aug 22, 2025, 7:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508220729
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723