The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dmaengine: nbpfaxi: Fix memory corruption in probe() The nbpf->chan[] array is allocated earlier in the     nbpf_probe() function and it has num_channels elements. These three loops iterate one element farther     than they should and corrupt memory. The changes to the second loop are more involved. In this case, we're     copying data from the irqbuf[] array into the nbpf->chan[] array. If the data in irqbuf[i] is the error     IRQ then we skip it, so the iterators are not in sync. I added a check to ensure that we don't go beyond     the end of the irqbuf[] array. I'm pretty sure this can't happen, but it seemed harmless to add a check.
    On the other hand, after the loop has ended there is a check to ensure that the chan iterator is where     we expect it to be. In the original code we went one element beyond the end of the array so the iterator     wasn't in the correct place and it would always return -EINVAL. However, now it will always be in the     correct place. I deleted the check since we know the result. (CVE-2025-38538)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38538

high Nessus Plugin ID 259951

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.1

Version 1.11 Dec 4, 2025, 7:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512041943
Version 1.10 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.9 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.8 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511242208
Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.6 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932