The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series,     using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting     info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in     some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by     syzbot [1] using acct(2). The 'net' structure can be obtained from the table->data using container_of().
    Note that table->data could also be used directly, but that would increase the size of this fix, while     'sctp.ctl_sock' still needs to be retrieved from 'net' structure. (CVE-2025-21638)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21638

medium Nessus Plugin ID 230715

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.4

Version 1.1

Version 1.11 Dec 4, 2025, 7:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512041943
Version 1.10 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.4 Sep 2, 2025, 6:30 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2025-21638, severity increased from "Low" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723