TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1195 advisory.

    TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and     change permissions via a symlink race between fopen(w) on the history path and subsequent chmod() on the     same path. (CVE-2025-9810)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of redis installed on the remote host is prior to 6.2.14-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2REDIS6-2025-014 advisory.

    TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and     change permissions via a symlink race between fopen(w) on the history path and subsequent chmod() on the     same path. (CVE-2025-9810)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cbe2e6c8ce advisory.

    CVE-2025-9810

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b83972992e advisory.

    CVE-2025-9810

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change     permissions via a symlink race between fopen(w) on the history path and subsequent chmod() on the same     path. (CVE-2025-9810)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
266151	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2025-1195)	Nessus	Amazon Linux Local Security Checks	medium
265068	Amazon Linux 2 : redis, --advisory ALAS2REDIS6-2025-014 (ALASREDIS6-2025-014)	Nessus	Amazon Linux Local Security Checks	medium
264791	Fedora 41 : linenoise (2025-cbe2e6c8ce)	Nessus	Fedora Local Security Checks	medium
264783	Fedora 42 : linenoise (2025-b83972992e)	Nessus	Fedora Local Security Checks	medium
261459	Linux Distros Unpatched Vulnerability : CVE-2025-9810	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-9810

medium

Tenable Plugins

medium

medium

medium

medium

medium