Wazuh Vulnerability Scanner on GCP Ubuntu 2404 LTS False positive

[Necip Tomurcuk]

Hi,

On our Wazuh Manager (v4.13.0) we have seen that many gcp ubuntu machines have vulnerabilities like below;

But when we have looked at on nvd site, it says that it is for linux-gcp-6.11 not for linux-gcp-6.14.

Why I see such false positives?

Thanks.

[Md. Nazmur Sakib]

Hello Necip,

It seems like a false positive to me. I will escalate this to the CTI team for further analysis. Once confirmed by the team, if this is a false positive, we will take necessary steps to sanitise the feed. Your Wazuh manager will automatically sync with the updated feed once the feed is sanitised, and the vulnerability will be removed from your dashboard. Thank you for reporting this.

I will share furter updates with you in a short time.

[Necip Tomurcuk]

Thank you so much Nazmur for your update and escalation.