The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix assumption that     Resolution Multipliers must be in Logical Collections A report in 2019 by the syzbot fuzzer was found to     be connected to two errors in the HID core associated with Resolution Multipliers. One of the errors was     fixed by commit ea427a222d8b (HID: core: Fix deadloop in hid_apply_multiplier.), but the other has not     been fixed. This error arises because hid_apply_multipler() assumes that every Resolution Multiplier     control is contained in a Logical Collection, i.e., there's no way the routine can ever set     multiplier_collection to NULL. This is in spite of the fact that the function starts with a big comment     saying: * The Resolution Multiplier control must be contained in the same * Logical Collection as the     control(s) to which it is to be applied. ... * If no Logical Collection is * defined, the Resolution     Multiplier is associated with all * controls in the report. * HID Usage Table, v1.12, Section 4.3.1, p30
    * * Thus, search from the current collection upwards until we find a * logical collection... The comment     and the code overlook the possibility that none of the collections found may be a Logical Collection. The     fix is to set the multiplier_collection pointer to NULL if the collection found isn't a Logical     Collection. (CVE-2024-57986)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-57986

medium Nessus Plugin ID 230926

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.8

Version 1.7

Version 1.1

Version 1.14 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
Version 1.13 Jan 16, 2026, 10:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601162212
Version 1.12 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.11 Dec 4, 2025, 1:11 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512040111
Version 1.10 Nov 12, 2025, 12:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120037
Version 1.8 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.7 Oct 27, 2025, 11:56 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702