The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - spufs: fix gang directory lifetimes prior to [POWERPC] spufs: Fix gang destroy leaks we used to have a     problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets     removed when that gets closed, but if somebody has created a context belonging to that gang and kept it     alive until the gang got closed, removal failed and we ended up with a leak. Unfortunately, it had been     fixed the wrong way. Dentry of gang directory was no longer pinned, and rmdir on close was gone. One     problem was that failure of open kept calling simple_rmdir() as cleanup, which meant an unbalanced dput().
    Another bug was in the success case - gang creation incremented link count on root directory, but that was     no longer undone when gang got destroyed. Fix consists of * reverting the commit in question * adding a     counter to gang, protected by ->i_rwsem of gang directory inode. * having it set to 1 at creation time,     dropped in both spufs_dir_close() and spufs_gang_close() and bumped in spufs_create_context(), provided     that it's not 0. * using simple_recursive_removal() to take the gang directory out when counter reaches     zero. (CVE-2025-22072)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-22072

medium Nessus Plugin ID 245805

Version 1.8

Version 1.7

Version 1.6

Version 1.3

Version 1.2

Version 1.8 Nov 3, 2025, 9:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511032125
Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.6 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510272356
Version 1.3 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.2 Aug 27, 2025, 8:29 AM Plugin metadata Detection (updated detection logic) CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSS metrics ("Cvssv4 score" set to 0.0) Plugin Feed: 202508270829