The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: mctp: unshare packets when reassembling Ensure that the frag_list used for reassembly isn't shared     with other packets. This avoids incorrect reassembly when packets are cloned, and prevents a memory leak     due to circular references between fragments and their skb_shared_info. The upcoming MCTP-over-USB driver     uses skb_clone which can trigger the problem - other MCTP drivers don't share SKBs. A kunit test is added     to reproduce the issue. (CVE-2025-21972)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21972

medium Nessus Plugin ID 246822

Version 1.6

Version 1.3

Version 1.2

Version 1.6 Sep 30, 2025, 5:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509301708
Version 1.3 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.2 Aug 27, 2025, 8:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508270829