The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not     used, the low level transport drivers expect the first byte to be 0. However, currently the allocated     buffer not account for that extra byte, meaning that instead of having 8 guaranteed bytes for implement to     be working, we only have 7. (CVE-2025-38495)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38495

high Nessus Plugin ID 252225

Version 1.9

Version 1.8

Version 1.3

Version 1.2

Version 1.1

Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.2 Sep 1, 2025, 12:37 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237
Version 1.1 Aug 19, 2025, 8:36 AM New Plugin Feed: 202508190836