The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nfsd: put dl_stid if fail to queue dl_recall Before calling nfsd4_run_cb to queue dl_recall to the     callback_wq, we increment the reference count of dl_stid. We expect that after the corresponding     work_struct is processed, the reference count of dl_stid will be decremented through the callback function     nfsd4_cb_recall_release. However, if the call to nfsd4_run_cb fails, the incremented reference count of     dl_stid will not be decremented correspondingly, leading to the following nfs4_stid leak: unreferenced     object 0xffff88812067b578 (size 344): comm nfsd, pid 2761, jiffies 4295044002 (age 5541.241s) hex dump     (first 32 bytes): 01 00 00 00 6b 6b 6b 6b b8 02 c0 e2 81 88 ff ff ....kkkk........ 00 6b 6b 6b 6b 6b 6b 6b     00 00 00 00 ad 4e ad de .kkkkkkk.....N.. backtrace: kmem_cache_alloc+0x4b9/0x700     nfsd4_process_open1+0x34/0x300 nfsd4_open+0x2d1/0x9d0 nfsd4_proc_compound+0x7a2/0xe30     nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0     kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 unreferenced object     0xffff8881499f4d28 (size 368): comm nfsd, pid 2761, jiffies 4295044005 (age 5541.239s) hex dump (first     32 bytes): 01 00 00 00 00 00 00 00 30 4d 9f 49 81 88 ff ff ........0M.I.... 30 4d 9f 49 81 88 ff ff 20 00     00 00 01 00 00 00 0M.I.... ....... backtrace: kmem_cache_alloc+0x4b9/0x700 nfs4_alloc_stid+0x29/0x210     alloc_init_deleg+0x92/0x2e0 nfs4_set_delegation+0x284/0xc00 nfs4_open_delegation+0x216/0x3f0     nfsd4_process_open2+0x2b3/0xee0 nfsd4_open+0x770/0x9d0 nfsd4_proc_compound+0x7a2/0xe30     nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0     kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 Fix it by checking the result of     nfsd4_run_cb and call nfs4_put_stid if fail to queue dl_recall. (CVE-2025-22025)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-22025

medium Nessus Plugin ID 246513

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.2

Version 1.1

Version 1.13 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin Feed: 202511261315
Version 1.12 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.11 Nov 13, 2025, 4:18 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511131618
Version 1.10 Nov 8, 2025, 10:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511082207
Version 1.9 Nov 3, 2025, 9:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511032125
Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.7 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
Version 1.2 Sep 1, 2025, 12:37 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237
Version 1.1 Aug 9, 2025, 7:26 AM New Plugin Feed: 202508090726