The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new     channel list, it will be processed according to the following steps: 1. update new channel list to     cfg80211 and queue reg_work. 2. cfg80211 handles new channel list during reg_work. 3. update cfg80211's     handled channel list to firmware by ath11k_reg_update_chan_list(). But ath11k will immediately execute     step 3 after reg_work is just queued. Since step 2 is asynchronous, cfg80211 may not have completed     handling the new channel list, which may leading to an out-of-bounds write error: BUG: KASAN: slab-out-of-     bounds in ath11k_reg_update_chan_list Call Trace: ath11k_reg_update_chan_list+0xbfe/0xfe0 [ath11k]     kfree+0x109/0x3a0 ath11k_regd_update+0x1cf/0x350 [ath11k] ath11k_regd_update_work+0x14/0x20 [ath11k]     process_one_work+0xe35/0x14c0 Should ensure step 2 is completely done before executing step 3. Thus Wen     raised patch[1]. When flag NL80211_REGDOM_SET_BY_DRIVER is set, cfg80211 will notify ath11k after step 2     is done. So enable the flag NL80211_REGDOM_SET_BY_DRIVER then cfg80211 will notify ath11k after step 2 is     done. At this time, there will be no KASAN bug during the execution of the step 3. [1]     https://patchwork.kernel.org/project/linux-wireless/patch/20230201065313.27203-1-quic_wgong@quicinc.com/     Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 (CVE-2025-23133)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-23133

high Nessus Plugin ID 248069

Version 1.17

Version 1.16

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.5

Version 1.3

Version 1.17 Mar 26, 2026, 1:29 AM Detection (updated detection logic) Plugin Feed: 202603260129
Version 1.16 Mar 24, 2026, 8:21 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603242021
Version 1.15 Mar 18, 2026, 10:57 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603181057
Version 1.14 Mar 17, 2026, 4:16 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603171616
Version 1.13 Mar 10, 2026, 1:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603100156
Version 1.12 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.11 Jan 30, 2026, 10:33 PM Detection (updated detection logic) Plugin Feed: 202601302233
Version 1.10 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.9 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.8 Nov 26, 2025, 1:15 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.5 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730