The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - riscv: Sync efi page table's kernel mappings before switching The EFI page table is initially created as a     copy of the kernel page table. With VMAP_STACK enabled, kernel stacks are allocated in the vmalloc area:
    if the stack is allocated in a new PGD (one that was not present at the moment of the efi page table     creation or not synced in a previous vmalloc fault), the kernel will take a trap when switching to the efi     page table when the vmalloc kernel stack is accessed, resulting in a kernel panic. Fix that by updating     the efi kernel mappings before switching to the efi page table. (CVE-2022-49004)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
170458	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-012 (ALASKERNEL-5.15-2023-012)	Nessus	Amazon Linux Local Security Checks	1/24/2023	2/11/2026	high
225191	Linux Distros Unpatched Vulnerability : CVE-2022-49004	Nessus	Misc.	3/5/2025	9/6/2025	medium

Detections

Analytics

Plugins Search

high

medium