The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux     specific construct, where the data produced by the GetEventLog() boot service is cached in memory, and     passed on to the OS using an EFI configuration table. The use of EFI_LOADER_DATA here results in the     region being left unreserved in the E820 memory map constructed by the EFI stub, and this is the memory     description that is passed on to the incoming kernel by kexec, which is therefore unaware that the region     should be reserved. Even though the utility of the TPM2 event log after a kexec is questionable, any     corruption might send the parsing code off into the weeds and crash the kernel. So let's use     EFI_ACPI_RECLAIM_MEMORY instead, which is always treated as reserved by the E820 conversion logic.
    (CVE-2024-49858)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-49858

medium Nessus Plugin ID 231706

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.6

Version 1.1

Version 1.12 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
Version 1.11 Jan 16, 2026, 10:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601162212
Version 1.10 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.6 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061955
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702