NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:20218-1 advisory.

    Update to version 24.11.4.

    Security issues fixed:

    - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak     information and       cause a denial of service on the network interface (bsc#1254161).

    Other issues fixed:

    - Remove obsolete build option -Denable_kmods.
    - Add which as a build requirement.
    - Drop pesign and needssslcertforbuild because we don't build a kmp anymore (bsc#1247389).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20148-1 advisory.

    Update to version 24.11.4.

    Security issues fixed:

    - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak     information and       cause a denial of service on the network interface (bsc#1254161).

    Other issues fixed:

    - Remove obsolete build option -Denable_kmods.
    - Add which as a build requirement.
    - Drop pesign and needssslcertforbuild because we don't build a kmp anymore (bsc#1247389).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0238-1 advisory.

    Update to version 24.11.4:

    - CVE-2025-23259: Fixed an attacker on a VM in the system can cause information disclosure and denial of     service (bsc#1254161).

    Changelog:

    https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id10     https://doc.dpdk.org/guides-24.11/rel_notes/release_24_11.html#id5

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4534-1 advisory.

    Update to version 22.11.10.

    Security issues fixed:

    - CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak     information and       cause a denial of service on the network interface (bsc#1254161).

    Other updates and bugfixes:

    - Fix SUSE provided DPDK modules tainting the kernel as unsupported (bsc#1214724).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4254-1 advisory.

    - Update to version 22.11.10
    - CVE-2025-23259: Fixed an out-of-order completions in ordinary Rx burst. (bsc#1254161)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7816-1 advisory.

    It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could     possibly use this issue to obtain sensitive information, or cause the network interface to crash,     resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the     system might be able to cause information disclosure and denial of service on the network interface.
    (CVE-2025-23259)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
298235	SUSE SLES16 Security Update : dpdk (SUSE-SU-2026:20218-1)	Nessus	SuSE Local Security Checks	medium
297774	openSUSE 16 Security Update : dpdk (openSUSE-SU-2026:20148-1)	Nessus	SuSE Local Security Checks	medium
296485	SUSE SLES15 Security Update : dpdk (SUSE-SU-2026:0238-1)	Nessus	SuSE Local Security Checks	medium
281464	SUSE SLES15 / openSUSE 15 Security Update : dpdk22 (SUSE-SU-2025:4534-1)	Nessus	SuSE Local Security Checks	medium
277259	SUSE SLES15 / openSUSE 15 Security Update : dpdk (SUSE-SU-2025:4254-1)	Nessus	SuSE Local Security Checks	medium
269996	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : DPDK vulnerability (USN-7816-1)	Nessus	Ubuntu Local Security Checks	medium
265673	Linux Distros Unpatched Vulnerability : CVE-2025-23259	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-23259

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium