The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF-side frozen BPF     map (like in case of .rodata), it was still possible to write into it from a BPF program side through     specific helpers having ARG_PTR_TO_{LONG,INT} as arguments. In check_func_arg() when the argument is as     mentioned, the meta->raw_mode is never set. Later, check_helper_mem_access(), under the case of     PTR_TO_MAP_VALUE as register base type, it assumes BPF_READ for the subsequent call to     check_map_access_type() and given the BPF map is read-only it succeeds. The helpers really need to be     annotated as ARG_PTR_TO_{LONG,INT} | MEM_UNINIT when results are written into them as opposed to read out     of them. The latter indicates that it's okay to pass a pointer to uninitialized memory as the memory is     written to anyway. However, ARG_PTR_TO_{LONG,INT} is a special case of ARG_PTR_TO_FIXED_SIZE_MEM just with     additional alignment requirement. So it is better to just get rid of the ARG_PTR_TO_{LONG,INT} special     cases altogether and reuse the fixed size memory types. For this, add MEM_ALIGNED to additionally ensure     alignment given these helpers write directly into the args via *<ptr> = val. The .arg*_size has been     initialized reflecting the actual sizeof(*<ptr>). MEM_ALIGNED can only be used in combination with     MEM_FIXED_SIZE annotated argument types, since in !MEM_FIXED_SIZE cases the verifier does not know the     buffer size a priori and therefore cannot blindly write *<ptr> = val. (CVE-2024-49861)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-49861

high Nessus Plugin ID 231840

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.6

Version 1.5

Version 1.4

Version 1.1

Version 1.13 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.12 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.11 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.9 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.6 Sep 5, 2025, 4:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509051638
Version 1.5 Sep 3, 2025, 6:28 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509030628
Version 1.4 Aug 28, 2025, 1:38 AM CVSS metrics ("CVSSv2 score" set to 5.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2024-49861, severity increased from "Low" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508280138
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702