The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS     in tls_alert_recv() due to its assumption it can read data from the msg iterator's kvec.. kTLS     implementation splits TLS non-data record payload between the control message buffer (which includes the     type such as TLS aler or TLS cipher change) and the rest of the payload (say TLS alert's     level/description) which goes into the msg payload buffer. This patch proposes to rework how control     messages are setup and used by sock_recvmsg(). If no control message structure is setup, kTLS layer will     read and process TLS data record types. As soon as it encounters a TLS control message, it would return an     error. At that point, NFS can setup a kvec backed msg buffer and read in the control message such as a TLS     alert. Msg iterator can advance the kvec pointer as a part of the copy process thus we need to revert the     iterator before calling into the tls_alert_recv. (CVE-2025-38566)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38566

high Nessus Plugin ID 260117

Version 1.6

Version 1.5

Version 1.1

Version 1.6 Sep 30, 2025, 12:41 AM Detection (updated detection logic) Plugin Feed: 202509300041
Version 1.5 Sep 25, 2025, 11:29 PM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.1 Sep 1, 2025, 4:30 AM New Plugin Feed: 202509010430