The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the     transport changes If the socket has been de-assigned or assigned to another transport, we must discard any     packets received because they are not expected and would cause issues when we access vsk->transport. A     possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect()     interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a     NULL pointer dereference. (CVE-2025-21669)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21669

medium Nessus Plugin ID 230861

Version 1.6

Version 1.1

Version 1.6 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723