The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ASoC: qcom: Fix uninitialized pointer dmactl In the case where __lpass_get_dmactl_handle is called and the     driver id dai_id is invalid the pointer dmactl is not being assigned a value, and dmactl contains a     garbage value since it has not been initialized and so the null check may not work. Fix this to initialize     dmactl to NULL. One could argue that modern compilers will set this to zero, but it is useful to keep this     initialized as per the same way in functions __lpass_platform_codec_intf_init and     lpass_cdc_dma_daiops_hw_params. Cleans up clang scan build warning: sound/soc/qcom/lpass-cdc-dma.c:275:7:
    warning: Branch condition evaluates to a garbage value [core.uninitialized.Branch] (CVE-2024-26799)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
227612	Linux Distros Unpatched Vulnerability : CVE-2024-26799	Nessus	Misc.	3/5/2025	9/6/2025	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	high

Detections

Analytics

Plugins Search

medium

high