The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve     subreg_def Range propagation must not affect subreg_def marks, otherwise the following example is     rewritten by verifier incorrectly when BPF_F_TEST_RND_HI32 flag is set: 0: call bpf_ktime_get_ns call     bpf_ktime_get_ns 1: r0 &= 0x7fffffff after verifier r0 &= 0x7fffffff 2: w1 = w0 rewrites w1 = w0 3: if w0     < 10 goto +0 --------------> r11 = 0x2f5674a6 (r) 4: r1 >>= 32 r11 <<= 32 (r) 5: r0 = r1 r1 |= r11 (r) 6:
    exit; if w0 < 0xa goto pc+0 r1 >>= 32 r0 = r1 exit (or zero extension of w1 at (2) is missing for     architectures that require zero extension for upper register half). The following happens w/o this patch:
    - r0 is marked as not a subreg at (0); - w1 is marked as subreg at (2); - w1 subreg_def is overridden at     (3) by copy_register_state(); - w1 is read at (5) but mark_insn_zext() does not mark (2) for zero     extension, because w1 subreg_def is not set; - because of BPF_F_TEST_RND_HI32 flag verifier inserts random     value for hi32 bits of (2) (marked (r)); - this random value is read at (5). (CVE-2024-53125)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-53125

low Nessus Plugin ID 231182

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Sep 6, 2025, 7:55 PM CVSS metrics ("CVSSv3 score" set to 0.0) CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509061955
Version 1.2 Sep 3, 2025, 6:28 AM CVSS metrics ("CVSSv2 score" set to 2.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N") CVSS metrics ("CVSSv3 score" set to 0.0) CVSS metrics ("CVSSv3 vector" set to none) CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) CVSSv2 severity (based on CVE-2024-53125, severity decreased from "Medium" to "Low") CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509030628
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702