The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() There is a potential NULL     pointer dereference in zd_mac_tx_to_dev(). For example, the following is possible: T0 T1     zd_mac_tx_to_dev() /* len == skb_queue_len(q) */ while (len > ZD_MAC_MAX_ACK_WAITERS) { filter_ack()     spin_lock_irqsave(&q->lock, flags); /* position == skb_queue_len(q) */ for (i=1; i<position; i++) skb =
    __skb_dequeue(q) if (mac->type == NL80211_IFTYPE_AP) skb = __skb_dequeue(q);
    spin_unlock_irqrestore(&q->lock, flags); skb_dequeue() -> NULL Since there is a small gap between checking     skb queue length and skb being unconditionally dequeued in zd_mac_tx_to_dev(), skb_dequeue() can return     NULL. Then the pointer is passed to zd_mac_tx_status() where it is dereferenced. In order to avoid     potential NULL pointer dereference due to situations like above, check if skb is not NULL before passing     it to zd_mac_tx_status(). Found by Linux Verification Center (linuxtesting.org) with SVACE.
    (CVE-2025-38513)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38513

medium Nessus Plugin ID 259949

Version 1.11

Version 1.10

Version 1.7

Version 1.6

Version 1.1

Version 1.11 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.10 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.7 Oct 27, 2025, 3:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510271515
Version 1.6 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932