The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools     like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus,     there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently     there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher     value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides     stats array, where wrong address may allow out-of-bounds read/write. Fix that by adding address     verification before C45 read/write operation. While this excludes this access from any statistics, it     improves security of read/write operation. (CVE-2025-38110)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38110

medium Nessus Plugin ID 249049

Version 1.10

Version 1.9

Version 1.6

Version 1.3

Version 1.2

Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.9 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510280902
Version 1.6 Oct 1, 2025, 4:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510010414
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.2 Aug 31, 2025, 9:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508310916