The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series nilfs2: fix null-ptr-deref bugs     on block tracepoints. This series fixes null pointer dereference bugs that occur when using nilfs2 and     two block-related tracepoints. This patch (of 2): It has been reported that when using     block:block_touch_buffer tracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a NULL     pointer dereference, or a general protection fault when KASAN is enabled. This happens because since the     tracepoint was added in touch_buffer(), it references the dev_t member bh->b_bdev->bd_dev regardless of     whether the buffer head has a pointer to a block_device structure. In the current implementation, the     block_device structure is set after the function returns to the caller. Here, touch_buffer() is used to     mark the folio/page that owns the buffer head as accessed, but the common search helper for folio/page     used by the caller function was optimized to mark the folio/page as accessed when it was reimplemented a     long time ago, eliminating the need to call touch_buffer() here in the first place. So this solves the     issue by eliminating the touch_buffer() call itself. (CVE-2024-53131)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-53131

medium Nessus Plugin ID 231823

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.4

Version 1.1

Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.6 Sep 20, 2025, 5:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509200527
Version 1.5 Sep 7, 2025, 7:21 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509070721
Version 1.4 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702