The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition In dw_i3c_common_probe,     &master->hj_work is bound with dw_i3c_hj_work. And dw_i3c_master_irq_handler can call     dw_i3c_master_irq_handle_ibis function to start the work. If we remove the module which will call     dw_i3c_common_remove to make cleanup, it will free master->base through i3c_master_unregister while the     work mentioned above will be used. The sequence of operations that may lead to a UAF bug is as follows:
    CPU0 CPU1 | dw_i3c_hj_work dw_i3c_common_remove | i3c_master_unregister(&master->base) |     device_unregister(&master->dev) | device_release | //free master->base | |     i3c_master_do_daa(&master->base) | //use master->base Fix it by ensuring that the work is canceled before     proceeding with the cleanup in dw_i3c_common_remove. (CVE-2024-57984)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-57984

high Nessus Plugin ID 231156

Version 1.10

Version 1.9

Version 1.8

Version 1.1

Version 1.10 Nov 12, 2025, 12:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120037
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702