The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception will eventually     occur when qla1280.c driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level > 2. I think its     clear from the code that the intention here is sg_dma_len(s) not length of sg_next(s) when printing the     debug info. (CVE-2025-21957)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21957

medium Nessus Plugin ID 244622

Version 1.8

Version 1.6

Version 1.2

Version 1.8 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803
Version 1.6 Oct 1, 2025, 4:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510010414
Version 1.2 Sep 1, 2025, 12:37 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237