The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear     is to wait on locally generated fence and then return. The code is waiting on m->fence which could be the     local fence but this is only stable under the job mutex leading to a possible UAF. Fix code to wait on     local fence. (cherry picked from commit 762b7e95362170b3e13a8704f38d5e47eca4ba74) (CVE-2025-37869)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-37869

high Nessus Plugin ID 246565

Version 1.2

Version 1.1

Version 1.2 Aug 23, 2025, 2:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508230229
Version 1.1 Aug 9, 2025, 7:26 AM New Plugin Feed: 202508090726