The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - posix-clock: Fix missing timespec64 check in pc_clock_settime() As Andrew pointed out, it will make sense     that the PTP core checked timespec64 struct's tv_sec and tv_nsec range before calling     ptp->info->settime64(). As the man manual of clock_settime() said, if tp.tv_sec is negative or tp.tv_nsec     is outside the range [0..999,999,999], it should return EINVAL, which include dynamic clocks which handles     PTP clock, and the condition is consistent with timespec64_valid(). As Thomas suggested,     timespec64_valid() only check the timespec is valid, but not ensure that the time is in a valid range, so     check it ahead using timespec64_valid_strict() in pc_clock_settime() and return -EINVAL if not valid.
    There are some drivers that use tp->tv_sec and tp->tv_nsec directly to write registers without validity     checks and assume that the higher layer has checked it, which is dangerous and will benefit from this,     such as hclge_ptp_settime(), igb_ptp_settime_i210(), _rcar_gen4_ptp_settime(), and some drivers can remove     the checks of itself. (CVE-2024-50195)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-50195

medium Nessus Plugin ID 230820

Version 1.10

Version 1.9

Version 1.6

Version 1.2

Version 1.1

Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.9 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.6 Sep 5, 2025, 4:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509051638
Version 1.2 Mar 6, 2025, 5:02 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202503061702
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723