Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-583.el9 build changelog.

  - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's     subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by     class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's     subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit(). (CVE-2025-21745)

  - In the Linux kernel, the following vulnerability has been resolved: io_uring/uring_cmd: unconditionally     copy SQEs at prep time This isn't generally necessary, but conditions have been observed where SQE data is     accessed from the original SQE after prep has been done and outside of the initial issue. Opcode prep     handlers must ensure that any SQE related data is stable beyond the prep phase, but uring_cmd is a bit     special in how it handles the SQE which makes it susceptible to reading stale data. If the application has     reused the SQE before the original completes, then that can lead to data corruption. Down the line we can     relax this again once uring_cmd has been sanitized a bit, and avoid unnecessarily copying the SQE.
    (CVE-2025-21837)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2025-21837

No Score

Tenable Plugins

medium