The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before     5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init()     failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because     rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when     invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger     failure if they could corrupt kernel memory (in which case a small memory leak is not a significant     problem). (CVE-2019-19065)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2019-19065

medium Nessus Plugin ID 222809

Version 1.6

Version 1.2

Version 1.1

Version 1.6 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.2 May 10, 2025, 1:49 PM New Plugin Feed: 202505101349
Version 1.1 Mar 5, 2025, 1:16 AM New Plugin Feed: 202503050116