Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() The ub913 and ub953 drivers call fwnode_handle_put(priv->sd.fwnode) as part of their remove process, and if the driver is removed multiple times, eventually leads to put overflow, possibly causing memory corruption or crash. The fwnode_handle_put() is a leftover from commit 905f88ccebb1 (media: i2c: ds90ub9x3: Fix sub-device matching), which changed the code related to the sd.fwnode, but missed removing these fwnode_handle_put() calls. (CVE-2024-58003)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2024-58003

high Nessus 插件 ID 231284

版本 1.6

版本 1.5

版本 1.2

版本 1.1

版本 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
版本 1.5 Oct 27, 2025, 11:56 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
版本 1.2 Aug 6, 2025, 4:52 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2024-58003, severity decreased from "High" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508060452
版本 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702