The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice     instruction handlers are known to access instruction data elements beyond the first `insn->n` elements in     some cases. The `do_insn_ioctl()` and `do_insnlist_ioctl()` functions allocate at least `MIN_SAMPLES` (16)     data elements to deal with this, but they do not initialize all of that. For Comedi instruction codes that     write to the subdevice, the first `insn->n` data elements are copied from user-space, but the remaining     elements are left uninitialized. That could be a problem if the subdevice instruction handler reads the     uninitialized data. Ensure that the first `MIN_SAMPLES` elements are initialized before calling these     instruction handlers, filling the uncopied elements with 0. For `do_insnlist_ioctl()`, the same data     buffer elements are used for handling a list of instructions, so ensure the first `MIN_SAMPLES` elements     are initialized for each instruction that writes to the subdevice. (CVE-2025-38478)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38478

high Nessus Plugin ID 252186

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.2 Sep 1, 2025, 12:37 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237
Version 1.1 Aug 19, 2025, 8:36 AM New Plugin Feed: 202508190836