The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN     when freeing old msg The send completion handler can run after cm_id has advanced to another message. The     cm_id lock is not needed in this case, but a recent change re-used cm_free_priv_msg(), which asserts that     the lock is held and WARNs if the cm_id's currently outstanding msg is different than the one being freed.
    (CVE-2025-38287)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38287

medium Nessus Plugin ID 246953

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.2

Version 1.12 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.11 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
Version 1.10 Jan 10, 2026, 7:58 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.9 Nov 21, 2025, 2:12 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.2 Aug 23, 2025, 2:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508230229