The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP     socket. This cannot be guaranteed in case the reader of the TCP socket entered before the TLS ULP was     installed, or uses some non-standard read API (eg. zerocopy ones). Replace the WARN_ON() and a buggy early     exit (which leaves anchor pointing to a freed skb) with real error handling. Wipe the parsing state and     tell the reader to retry. We already reload the anchor every time we (re)acquire the socket lock, so the     only condition we need to avoid is an out of bounds read (not having enough bytes in the socket for     previously parsed record len). If some data was read from under TLS but there's enough in the queue we'll     reload and decrypt what is most likely not a valid TLS record. Leading to some undefined behavior from TLS     perspective (corrupting a stream? missing an alert? missing an attack?) but no kernel crash should take     place. (CVE-2025-38616)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38616

medium Nessus Plugin ID 260242

Version 1.8

Version 1.7

Version 1.2

Version 1.1

Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.7 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.2 Sep 5, 2025, 7:39 AM CVSS metrics ("CVSSv2 score" set to 1.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N") CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.1 Sep 2, 2025, 6:30 AM New Plugin Feed: 202509020630