The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at     enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are     handling the event, a new TD may be queued at this ring position. I can trigger this race by rising     interrupt moderation to increase IRQ handling delay. Similar delay may occur naturally due to system load.
    If this ever happens after a Missed Service Error, missed TDs will be skipped and the new TD processed as     if it matched the event. It could be given back prematurely, risking data loss or buffer UAF by the xHC.
    Don't complete TDs on xrun events and don't warn if queued TDs don't match the event's TRB pointer, which     can be NULL or a link/no-op TRB. Don't warn if there are no queued TDs at all. Now that it's safe, also     handle xrun events if the skip flag is clear. This ensures completion of any TD stuck in 'error mid TD'     state right before the xrun event, which could happen if a driver submits a finite number of URBs to a     buggy HC and then an error occurs on the last TD. (CVE-2025-37882)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-37882

high Nessus Plugin ID 247323

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.3

Version 1.13 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.12 Jan 3, 2026, 12:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601030001
Version 1.11 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.10 Dec 2, 2025, 7:12 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.9 Nov 13, 2025, 8:05 AM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511130805
Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.7 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730