The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free     vulnerability, [0] [0]: https://lore.kernel.org/all/67af13f8.050a0220.21dd3.0038.GAE@google.com/     idr_for_each() is protected by rwsem, but this is not enough. If it is not protected by RCU read-critical     region, when idr_for_each() calls radix_tree_node_free() through call_rcu() to free the radix_tree_node     structure, the node will be freed immediately, and when reading the next node in     radix_tree_for_each_slot(), the already freed memory may be read. Therefore, we need to add code to make     sure that idr_for_each() is protected within the RCU read-critical region when we call it in     shm_destroy_orphaned(). (CVE-2025-38212)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38212

high Nessus Plugin ID 244121

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Sep 5, 2025, 7:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.3 Sep 1, 2025, 10:01 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509012201
Version 1.2 Aug 21, 2025, 7:41 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508210741
Version 1.1 Aug 7, 2025, 1:00 AM New Plugin Feed: 202508070100