The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller     repro, causes a kernel warning: r0 = *(u8 *)(r1 + 169); exit; With pointer field sk being at offset 168 in
    __sk_buff. This access is detected as a narrower read in bpf_skb_is_valid_access because it doesn't match     offsetof(struct __sk_buff, sk). It is therefore allowed and later proceeds to bpf_convert_ctx_access. Note     that for the is_narrower_load case in the convert_ctx_accesses(), the insn->off is aligned, so the cnt     may not be 0 because it matches the offsetof(struct __sk_buff, sk) in the bpf_convert_ctx_access. However,     the target_size stays 0 and the verifier errors with a kernel warning: verifier bug: error during ctx     access conversion(1) This patch fixes that to return a proper invalid bpf_context access off=X size=Y     error on the load instruction. The same issue affects multiple other fields in context structures that     allow narrow access. Some other non-affected fields (for sk_msg, sk_lookup, and sockopt) were also changed     to use bpf_ctx_range_ptr for consistency. Note this syzkaller crash was reported in the Closes link     below, which used to be about a different bug, fixed in commit fce7bd8e385a (bpf/verifier: Handle     BPF_LOAD_ACQ instructions in insn_def_regno()). Because syzbot somehow confused the two bugs, the new     crash and repro didn't get reported to the mailing list. (CVE-2025-38591)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38591

medium Nessus Plugin ID 260107

Version 1.16

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.1

Version 1.16 Feb 12, 2026, 7:05 AM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602120705
Version 1.14 Feb 10, 2026, 11:15 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602101115
Version 1.13 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.12 Jan 30, 2026, 9:16 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601300916
Version 1.11 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.10 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.9 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.8 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.1 Sep 1, 2025, 4:30 AM New Plugin Feed: 202509010430