The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not defer     rule destruction via call_rcu nf_tables_chain_destroy can sleep, it can't be used from call_rcu callbacks.
    Moreover, nf_tables_rule_release() is only safe for error unwinding, while transaction mutex is held and     the to-be-desroyed rule was not exposed to either dataplane or dumps, as it deactives+frees without the     required synchronize_rcu() in-between. nft_rule_expr_deactivate() callbacks will change ->use counters of     other chains/sets, see e.g. nft_lookup .deactivate callback, these must be serialized via transaction     mutex. Also add a few lockdep asserts to make this more explicit. Calling synchronize_rcu() isn't ideal,     but fixing this without is hard and way more intrusive. As-is, we can get: WARNING: ..
    net/netfilter/nf_tables_api.c:5515 nft_set_destroy+0x.. Workqueue: events nf_tables_trans_destroy_work     RIP: 0010:nft_set_destroy+0x3fe/0x5c0 Call Trace: <TASK> nf_tables_trans_destroy_work+0x6b7/0xad0     process_one_work+0x64a/0xce0 worker_thread+0x613/0x10d0 In case the synchronize_rcu becomes an issue, we     can explore alternatives. One way would be to allocate nft_trans_rule objects + one nft_trans_chain     object, deactivate the rules + the chain and then defer the freeing to the nft destroy workqueue. We'd     still need to keep the synchronize_rcu path as a fallback to handle -ENOMEM corner cases though.
    (CVE-2024-56655)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-56655

medium Nessus Plugin ID 230646

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 27, 2026, 7:09 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2024-56655, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605270709
Version 1.2 May 10, 2025, 1:49 PM New Plugin Feed: 202505101349
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723