The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test     program which can cause usb_hub_to_struct_hub() to dereference a NULL or inappropriate pointer: Oops:
    general protection fault, probably for non-canonical address 0xcccccccccccccccc: 0000 [#1] SMP     DEBUG_PAGEALLOC PTI CPU: 7 UID: 0 PID: 117 Comm: kworker/7:1 Not tainted 6.13.0-rc3-00017-gf44d154d6e3d     #14 Hardware name: FreeBSD BHYVE/BHYVE, BIOS 14.0 10/17/2021 Workqueue: usb_hub_wq hub_event RIP:
    0010:usb_hub_adjust_deviceremovable+0x78/0x110 ... Call Trace: <TASK> ? die_addr+0x31/0x80 ?     exc_general_protection+0x1b4/0x3c0 ? asm_exc_general_protection+0x26/0x30 ?     usb_hub_adjust_deviceremovable+0x78/0x110 hub_probe+0x7c7/0xab0 usb_probe_interface+0x14b/0x350     really_probe+0xd0/0x2d0 ? __pfx___device_attach_driver+0x10/0x10 __driver_probe_device+0x6e/0x110     driver_probe_device+0x1a/0x90 __device_attach_driver+0x7e/0xc0 bus_for_each_drv+0x7f/0xd0
    __device_attach+0xaa/0x1a0 bus_probe_device+0x8b/0xa0 device_add+0x62e/0x810     usb_set_configuration+0x65d/0x990 usb_generic_driver_probe+0x4b/0x70 usb_probe_device+0x36/0xd0 The cause     of this error is that the device has two interfaces, and the hub driver binds to interface 1 instead of     interface 0, which is where usb_hub_to_struct_hub() looks. We can prevent the problem from occurring by     refusing to accept hub devices that violate the USB spec by having more than one configuration or     interface. (CVE-2025-21776)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21776

medium Nessus Plugin ID 231113

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.12 Dec 3, 2025, 8:52 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512032052
Version 1.11 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.9 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.6 Sep 7, 2025, 7:21 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509070721
Version 1.5 Sep 6, 2025, 7:55 PM Plugin metadata Detection (updated detection logic) CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin Feed: 202509061955
Version 1.4 Sep 5, 2025, 7:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.3 Sep 1, 2025, 10:01 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509012201
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702