The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by     synchronizing access to mac_filter_hash This patch addresses a macvlan leak issue in the i40e driver     caused by concurrent access to vsi->mac_filter_hash. The leak occurs when multiple threads attempt to     modify the mac_filter_hash simultaneously, leading to inconsistent state and potential memory leaks. To     fix this, we now wrap the calls to i40e_del_mac_filter() and zeroing vf->default_lan_addr.addr with     spin_lock/unlock_bh(&vsi->mac_filter_hash_lock), ensuring atomic operations and preventing concurrent     access. Additionally, we add lockdep_assert_held(&vsi->mac_filter_hash_lock) in i40e_add_mac_filter() to     help catch similar issues in the future. Reproduction steps: 1. Spawn VFs and configure port vlan on them.
    2. Trigger concurrent macvlan operations (e.g., adding and deleting portvlan and/or mac filters). 3.
    Observe the potential memory leak and inconsistent state in the mac_filter_hash. This synchronization     ensures the integrity of the mac_filter_hash and prevents the described leak. (CVE-2024-50041)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-50041

medium Nessus Plugin ID 231762

Version 1.9

Version 1.8

Version 1.5

Version 1.4

Version 1.1

Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.5 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509061955
Version 1.4 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702