The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flush_tlb_range() when     used for zapping normal PMDs On the following path, flush_tlb_range() can be used for zapping normal PMD     entries (PMD entries that point to page tables) together with the PTE entries in the pointed-to page     table: collapse_pte_mapped_thp pmdp_collapse_flush flush_tlb_range The arm64 version of flush_tlb_range()     has a comment describing that it can be used for page table removal, and does not use any last-level     invalidation optimizations. Fix the X86 version by making it behave the same way. Currently, X86 only uses     this information for the following two purposes, which I think means the issue doesn't have much impact: -     In native_flush_tlb_multi() for checking if lazy TLB CPUs need to be IPI'd to avoid issues with     speculative page table walks. - In Hyper-V TLB paravirtualization, again for lazy TLB stuff. The patch     x86/mm: only invalidate final translations with INVLPGB which is currently under review (see     <https://lore.kernel.org/all/20241230175550.4046587-13-riel@surriel.com/>) would probably be making the     impact of this a lot worse. (CVE-2025-22045)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-22045

high Nessus Plugin ID 244322

Version 1.8

Version 1.7

Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.7 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510272356