The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: hns3: fix oops when unload drivers paralleling When unload hclge driver, it tries to disable sriov     first for each ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at the time, because it     removes all the ae_dev nodes, and it may cause oops. But we can't simply use hnae3_common_lock for this.
    Because in the process flow of pci_disable_sriov(), it will trigger the remove flow of VF, which will also     take hnae3_common_lock. To fixes it, introduce a new mutex to protect the unload process. (CVE-2025-21802)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21802

medium Nessus Plugin ID 230510

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.6 Sep 8, 2025, 1:52 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509080152
Version 1.5 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061955
Version 1.2 Aug 15, 2025, 7:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508151938
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723