The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier widgets could have     the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is     attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in     sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in     sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio. The correct     fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai =     w->private is valid 2. the dai (and thus the copier) is ALH copier (CVE-2025-21870)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-21870

medium Nessus Plugin ID 246964

Version 1.10

Version 1.9

Version 1.8

Version 1.6

Version 1.4

Version 1.3

Version 1.2

Version 1.10 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.6 Sep 21, 2025, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509210829
Version 1.4 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061955
Version 1.3 Sep 5, 2025, 4:38 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509051638
Version 1.2 Aug 27, 2025, 8:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508270829