The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explains the     absence of list_empty_rcu() and cautions programmers against relying on a list_empty() -> list_first()     sequence in RCU safe code. This is because each of these functions performs its own READ_ONCE() of the     list head. This can lead to a situation where the list_empty() sees a valid list entry, but the subsequent     list_first() sees a different view of list head state after a modification. In the case of dm-thin, this     author had a production box crash from a GP fault in the process_deferred_bios path. This function saw a     valid list head in get_first_thin() but when it subsequently dereferenced that and turned it into a     thin_c, it got the inside of the struct pool, since the list was now empty and referring to itself. The     kernel on which this occurred printed both a warning about a refcount_t being saturated, and a UBSAN error     for an out-of-bounds cpuid access in the queued spinlock, prior to the fault itself. When the resulting     kdump was examined, it was possible to see another thread patiently waiting in thin_dtr's synchronize_rcu.
    The thin_dtr call managed to pull the thin_c out of the active thins list (and have it be the last entry     in the active_thins list) at just the wrong moment which lead to this crash. Fortunately, the fix here is     straight forward. Switch get_first_thin() function to use list_first_or_null_rcu() which performs just a     single READ_ONCE() and returns NULL if the list is already empty. This was run against the devicemapper     test suite's thin-provisioning suites for delete and suspend and no regressions were observed.
    (CVE-2025-21664)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21664

medium Nessus Plugin ID 231655

Version 1.8

Version 1.7

Version 1.4

Version 1.3

Version 1.1

Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.7 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.4 Sep 5, 2025, 7:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.3 Sep 2, 2025, 6:30 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2025-21664, severity increased from "Low" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702