The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ASoC: core: Fix use-after-free in snd_soc_exit() KASAN reports a use-after-free: BUG: KASAN: use-after-     free in device_del+0xb5b/0xc60 Read of size 8 at addr ffff888008655050 by task rmmod/387 CPU: 2 PID: 387     Comm: rmmod Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK>     dump_stack_lvl+0x79/0x9a print_report+0x17f/0x47b kasan_report+0xbb/0xf0 device_del+0xb5b/0xc60     platform_device_del.part.0+0x24/0x200 platform_device_unregister+0x2e/0x40 snd_soc_exit+0xa/0x22     [snd_soc_core] __do_sys_delete_module.constprop.0+0x34f/0x5b0 do_syscall_64+0x3a/0x90     entry_SYSCALL_64_after_hwframe+0x63/0xcd ... </TASK> It's bacause in snd_soc_init(), snd_soc_util_init()     is possble to fail, but its ret is ignored, which makes soc_dummy_dev unregistered twice. snd_soc_init()     snd_soc_util_init() platform_device_register_simple(soc_dummy_dev) platform_driver_register() # fail     platform_device_unregister(soc_dummy_dev) platform_driver_register() # success ... snd_soc_exit()     snd_soc_util_exit() # soc_dummy_dev will be unregistered for second time To fix it, handle error and stop     snd_soc_init() when util_init() fail. Also clean debugfs when util_init() or driver_register() fail.
    (CVE-2022-49842)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49842

high Nessus Plugin ID 244135

Version 1.8

Version 1.7

Version 1.6

Version 1.2

Version 1.1

Version 1.8 Jan 16, 2026, 10:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601162212
Version 1.7 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.6 Nov 26, 2025, 1:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.2 Sep 2, 2025, 6:30 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2022-49842, severity increased from "Low" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Aug 7, 2025, 1:00 AM New Plugin Feed: 202508070100