The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is     used by Ceph with local caching sets up a new request to write data just read to the cache. The request is     started and then left to look after itself whilst the app continues. The request gets notified by the     backing fs upon completion of the async DIO write, but then tries to wake up the app because     NETFS_RREQ_OFFLOAD_COLLECTION isn't set - but the app isn't waiting there, and so the request just hangs.
    Fix this by setting NETFS_RREQ_OFFLOAD_COLLECTION which causes the notification from the backing     filesystem to put the collection onto a work queue instead. (CVE-2025-38534)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38534

high Nessus Plugin ID 260068

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.6 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.5 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.2 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.1 Aug 31, 2025, 7:32 PM New Plugin Feed: 202508311932