The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel BUG at     mm/vmalloc.c:3457! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 4 UID: 0 PID: 7408 Comm: test.sh     Kdump: loaded Not tainted 6.16.0+ #1 PREEMPT(voluntary) [...] RIP: 0010:vunmap+0x5f/0x70 [...] Call Trace:
    <TASK> __iommu_dma_free+0xe8/0x1c0 be_cmd_set_mac_list+0x3fe/0x640 [be2net] be_cmd_set_mac+0xaf/0x110     [be2net] be_vf_eth_addr_config+0x19f/0x330 [be2net] be_vf_setup+0x4f7/0x990 [be2net]     be_pci_sriov_configure+0x3a1/0x470 [be2net] sriov_numvfs_store+0x20b/0x380     kernfs_fop_write_iter+0x354/0x530 vfs_write+0x9b9/0xf60 ksys_write+0xf3/0x1d0 do_syscall_64+0x8c/0x3d0     be_cmd_set_mac_list() calls dma_free_coherent() under a spin_lock_bh. Fix it by freeing only after the     lock has been released. (CVE-2025-38569)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38569

medium Nessus Plugin ID 260091

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.1

Version 1.13 Dec 9, 2025, 2:31 AM Detection (updated detection logic) Plugin Feed: 202512090231
Version 1.12 Dec 5, 2025, 1:34 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512051334
Version 1.11 Dec 4, 2025, 7:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512041943
Version 1.10 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.9 Nov 26, 2025, 1:15 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.1 Sep 1, 2025, 4:30 AM New Plugin Feed: 202509010430