The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by     the previous patch between subflow failing and additional subflow creation. They are just harder to     trigger. The solution is similar. Use a separate flag to track the condition 'socket state prevent any     additional subflow creation' protected by the fallback lock. The socket fallback makes such flag true, and     also receiving or sending an MP_FAIL option. The field 'allow_infinite_fallback' is now always touched     under the relevant lock, we can drop the ONCE annotation on write. (CVE-2025-38552)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38552

high Nessus Plugin ID 259955

Version 1.4

Version 1.1

Version 1.4 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932