The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs,     verifier decides whether to invalidate all packet pointers in current state depending on the     changes_pkt_data property of the global sub-program. Because of this, an extension program replacing a     global sub-program must be compatible with changes_pkt_data property of the sub-program being replaced.
    This commit: - adds changes_pkt_data flag to struct bpf_prog_aux: - this flag is set in check_cfg() for     main sub-program; - in jit_subprogs() for other sub-programs; - modifies bpf_check_attach_btf_id() to     check changes_pkt_data flag; - moves call to check_attach_btf_id() after the call to check_cfg(), because     it needs changes_pkt_data flag to be set: bpf_check: ... ... - check_attach_btf_id resolve_pseudo_ldimm64     resolve_pseudo_ldimm64 --> bpf_prog_is_offloaded bpf_prog_is_offloaded check_cfg check_cfg +     check_attach_btf_id ... ... The following fields are set by check_attach_btf_id(): - env->ops -     prog->aux->attach_btf_trace - prog->aux->attach_func_name - prog->aux->attach_func_proto -     prog->aux->dst_trampoline - prog->aux->mod - prog->aux->saved_dst_attach_type -     prog->aux->saved_dst_prog_type - prog->expected_attach_type Neither of these fields are used by     resolve_pseudo_ldimm64() or bpf_prog_offload_verifier_prep() (for netronome and netdevsim drivers), so the     reordering is safe. (CVE-2024-58100)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-58100

medium Nessus Plugin ID 248179

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.3

Version 1.1

Version 1.11 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.10 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.9 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.8 Nov 23, 2025, 4:41 AM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.6 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.1 Aug 11, 2025, 11:36 PM New Plugin Feed: 202508112336