The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback commit 1f5664351410 (ASoC: lower no backend     DAIs enabled for ... Port log severity) ignores -EINVAL error message on common soc_pcm_ret(). It is     used from many functions, ignoring -EINVAL is over-kill. The reason why -EINVAL was ignored was it really     should only be used upon invalid parameters coming from userspace and in that case we don't want to log an     error since we do not want to give userspace a way to do a denial-of-service attack on the syslog /     diskspace. So don't use soc_pcm_ret() on .prepare callback is better idea. (CVE-2024-58077)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-58077

medium Nessus Plugin ID 232264

Version 1.12

Version 1.11

Version 1.10

Version 1.7

Version 1.6

Version 1.1

Version 1.12 Nov 12, 2025, 12:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120037
Version 1.11 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.10 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.7 Sep 8, 2025, 1:52 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509080152
Version 1.6 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061955
Version 1.1 Mar 7, 2025, 1:27 PM New Plugin Feed: 202503071327