The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iio: common: st_sensors: Fix use of uninitialize device structs Throughout the various probe functions     &indio_dev->dev is used before it is initialized. This caused a kernel panic in st_sensors_power_enable()     when the call to devm_regulator_bulk_get_enable() fails and then calls dev_err_probe() with the     uninitialized device. This seems to only cause a panic with dev_err_probe(), dev_err(), dev_warn() and     dev_info() don't seem to cause a panic, but are fixed as well. The issue is reported and traced here: [1]     (CVE-2025-38531)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38531

medium Nessus Plugin ID 259962

Version 1.10