The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps The LRU and LRU_PERCPU maps allocate a new     element on update before locking the target hash table bucket. Right after that the maps try to lock the     bucket. If this fails, then maps return -EBUSY to the caller without releasing the allocated element. This     makes the element untracked: it doesn't belong to either of free lists, and it doesn't belong to the hash     table, so can't be re-used; this eventually leads to the permanent -ENOMEM on LRU map updates, which is     unexpected. Fix this by returning the element to the local free list if bucket locking fails.
    (CVE-2023-54033)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-54033

medium Nessus Plugin ID 279914

Version 1.2