The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - kasan: remove kasan_find_vm_area() to prevent possible deadlock find_vm_area() couldn't be called in     atomic_context. If find_vm_area() is called to reports vm area information, kasan can trigger deadlock     like: CPU0 CPU1 vmalloc(); alloc_vmap_area(); spin_lock(&vn->busy.lock) spin_lock_bh(&some_lock);
    <interrupt occurs> <in softirq> spin_lock(&some_lock); <access invalid address> kasan_report();
    print_report(); print_address_description(); kasan_find_vm_area(); find_vm_area();
    spin_lock(&vn->busy.lock) // deadlock! To prevent possible deadlock while kasan reports, remove     kasan_find_vm_area(). (CVE-2025-38510)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38510

medium Nessus Plugin ID 259966

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.1

Version 1.10 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.9 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511242208
Version 1.8 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932