The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in     nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation,     and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory     as empty and corrupt the file system. In addition, since nilfs_empty_dir() does not immediately return on     a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the     directory's inode is also corrupted, causing the log writer thread to wait and hang, as reported by     syzbot. Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to     get a directory folio/page. (CVE-2024-39469)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-39469

high Nessus Plugin ID 253794

Version 1.6

Version 1.5

Version 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
Version 1.5 Oct 27, 2025, 11:56 PM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510272356