The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an     array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This will lead to out-of-     bounds access later in the code if 'config::ngpios' is > 1. So fix the code to allocate enough memory to     hold 'config::ngpios' of GPIO descriptors. While at it, also move the check for memory allocation failure     to be below the allocation to make it more readable. (CVE-2025-38395)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38395

high Nessus Plugin ID 247341

Version 1.8

Version 1.7

Version 1.8 Oct 27, 2025, 3:15 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510271515
Version 1.7 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803