The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's sendmsg implementation: (1)     rxrpc_new_client_call() should release the socket lock when returning an error from rxrpc_get_call_slot().
    (2) rxrpc_wait_for_tx_window_intr() will return without the call mutex held in the event that we're     interrupted by a signal whilst waiting for tx space on the socket or relocking the call mutex afterwards.
    Fix this by: (a) moving the unlock/lock of the call mutex up to rxrpc_send_data() such that the lock is     not held around all of rxrpc_wait_for_tx_window*() and (b) indicating to higher callers whether we're     return with the lock dropped. Note that this means recvmsg() will not block on this call whilst we're     waiting. (3) After dropping and regaining the call mutex, rxrpc_send_data() needs to go and recheck the     state of the tx_pending buffer and the tx_total_len check in case we raced with another sendmsg() on the     same call. Thinking on this some more, it might make sense to have different locks for sendmsg() and     recvmsg(). There's probably no need to make recvmsg() wait for sendmsg(). It does mean that recvmsg() can     return MSG_EOR indicating that a call is dead before a sendmsg() to that call returns - but that can     currently happen anyway. Without fix (2), something like the following can be induced: WARNING: bad unlock     balance detected! 5.16.0-rc6-syzkaller #0 Not tainted ------------------------------------- syz-     executor011/3597 is trying to release lock (&call->user_mutex) at: [<ffffffff885163a3>]     rxrpc_do_sendmsg+0xc13/0x1350 net/rxrpc/sendmsg.c:748 but there are no more locks to release! other info     that might help us debug this: no locks held by syz-executor011/3597. ... Call Trace: <TASK> __dump_stack     lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_unlock_imbalance_bug     include/trace/events/lock.h:58 [inline] __lock_release kernel/locking/lockdep.c:5306 [inline]     lock_release.cold+0x49/0x4e kernel/locking/lockdep.c:5657 __mutex_unlock_slowpath+0x99/0x5e0     kernel/locking/mutex.c:900 rxrpc_do_sendmsg+0xc13/0x1350 net/rxrpc/sendmsg.c:748 rxrpc_sendmsg+0x420/0x630     net/rxrpc/af_rxrpc.c:561 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120     net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463
    __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae [Thanks to     Hawkins Jiawei and Khalid Masum for their attempts to fix this] (CVE-2022-49998)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49998

medium Nessus Plugin ID 244267

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.1

Version 1.9 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.8 Jan 10, 2026, 7:58 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.7 Oct 30, 2025, 2:57 PM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510301457
Version 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.5 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.1 Aug 7, 2025, 10:03 AM New Plugin Feed: 202508071003