The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat     platform_max as control value This reverts commit 9bdd10d57a88 (ASoC: ops: Shift tested values in     snd_soc_put_volsw() by +min), and makes some additional related updates. There are two ways the     platform_max could be interpreted; the maximum register value, or the maximum value the control can be set     to. The patch moved from treating the value as a control value to a register one. When the patch was     applied it was technically correct as snd_soc_limit_volume() also used the register interpretation.
    However, even then most of the other usages treated platform_max as a control value, and     snd_soc_limit_volume() has since been updated to also do so in commit fb9ad24485087 (ASoC: ops: add     correct range check for limiting volume). That patch however, missed updating snd_soc_put_volsw() back to     the control interpretation, and fixing snd_soc_info_volsw_range(). The control interpretation makes more     sense as limiting is typically done from the machine driver, so it is appropriate to use the customer     facing representation rather than the internal codec representation. Update all the code to consistently     use this interpretation of platform_max. Finally, also add some comments to the soc_mixer_control struct     to hopefully avoid further patches switching between the two approaches. (CVE-2025-37889)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-37889

medium Nessus Plugin ID 244287

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.12 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.11 Dec 4, 2025, 1:11 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512040111
Version 1.10 Nov 26, 2025, 1:15 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.9 Oct 27, 2025, 3:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510271515
Version 1.8 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803
Version 1.3 Sep 5, 2025, 7:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.2 Sep 2, 2025, 6:30 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2025-37889, severity increased from "Medium" to "High") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
Version 1.1 Aug 7, 2025, 10:03 AM New Plugin Feed: 202508071003