The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib     needs to be able to handle kernel-initiated asynchronous DIO that is supplied with a bio_vec[] array.
    Currently, because of the async flag, this gets passed to netfs_extract_user_iter() which throws a warning     and fails because it only handles IOVEC and UBUF iterators. This can be triggered through a combination of     cifs and a loopback blockdev with something like: mount //my/cifs/share /foo dd if=/dev/zero of=/foo/m0     bs=4K count=1K losetup --sector-size 4096 --direct-io=on /dev/loop2046 /foo/m0 echo hello >/dev/loop2046     This causes the following to appear in syslog: WARNING: CPU: 2 PID: 109 at fs/netfs/iterator.c:50     netfs_extract_user_iter+0x170/0x250 [netfs] and the write to fail. Fix this by removing the check in     netfs_unbuffered_write_iter_locked() that causes async kernel DIO writes to be handled as userspace     writes. Note that this change relies on the kernel caller maintaining the existence of the bio_vec array     (or kvec[] or folio_queue) until the op is complete. (CVE-2025-21643)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21643

medium Nessus Plugin ID 231020

Version 1.7

Version 1.6

Version 1.3

Version 1.1

Version 1.7 Dec 4, 2025, 1:11 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512040111
Version 1.6 Nov 26, 2025, 1:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.3 Sep 2, 2025, 6:30 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702