The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service socket is opened     and bound, but calls are preallocated, then rxrpc_alloc_incoming_call() will oops because the     rxrpc_backlog struct doesn't get allocated until the first preallocation is made. Fix this by returning     NULL from rxrpc_alloc_incoming_call() if there is no backlog struct. This will cause the incoming call to     be aborted. (CVE-2025-38514)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38514

medium Nessus Plugin ID 259984

Version 1.9

Version 1.8

Version 1.1

Version 1.9 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.8 Nov 26, 2025, 1:15 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932