The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb Syzbot reported use-after-free Read in     ath9k_hif_usb_rx_cb() [0]. The problem was in incorrect htc_handle->drv_priv initialization. Probable call     trace which can trigger use-after-free: ath9k_htc_probe_device() /* htc_handle->drv_priv = priv; */     ath9k_htc_wait_for_target() <--- Failed ieee80211_free_hw() <--- priv pointer is freed <IRQ> ...
    ath9k_hif_usb_rx_cb() ath9k_hif_usb_rx_stream() RX_STAT_INC() <--- htc_handle->drv_priv access In order to     not add fancy protection for drv_priv we can move htc_handle->drv_priv initialization at the end of the     ath9k_htc_probe_device() and add helper macro to make all *_STAT_* macros NULL safe, since syzbot has     reported related NULL deref in that macros [1] (CVE-2022-50179)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-50179

medium Nessus Plugin ID 249667

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.3 Sep 5, 2025, 7:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.1 Aug 15, 2025, 7:38 PM New Plugin Feed: 202508151938