The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrfs: do not double complete bio on errors during compressed reads I hit some weird panics while fixing     up the error handling from btrfs_lookup_bio_sums(). Turns out the compression path will complete the bio     we use if we set up any of the compression bios and then return an error, and then btrfs_submit_data_bio()     will also call bio_endio() on the bio. Fix this by making btrfs_submit_compressed_read() responsible for     calling bio_endio() on the bio if there are any errors. Currently it was only doing it if we created the     compression bios, otherwise it was depending on btrfs_submit_data_bio() to do the right thing. This     creates the above problem, so fix up btrfs_submit_compressed_read() to always call bio_endio() in case of     an error, and then simply return from btrfs_submit_data_bio() if we had to call     btrfs_submit_compressed_read(). (CVE-2022-49167)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
225586	Linux Distros Unpatched Vulnerability : CVE-2022-49167	Nessus	Misc.	3/5/2025	10/28/2025	medium
276160	TencentOS Server 4: kernel (TSSA-2025:0432)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high

Detections

Analytics

Plugins Search

medium

high