The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases     po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the     fix are both similar to that of commit 15fe076edea7 (net/packet: fix a race in packet_bind() and     packet_notifier()). There too the packet_notifier NETDEV_UP event managed to run while a po->bind_lock     critical section had to be temporarily released. And the fix was similarly to temporarily set po->num to     zero to keep the socket unhooked until the lock is retaken. The po->bind_lock in packet_set_ring and     packet_notifier precede the introduction of git history. (CVE-2025-38617)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38617

medium Nessus Plugin ID 260243

Version 1.8

Version 1.7

Version 1.6

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Oct 27, 2025, 6:34 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510270634
Version 1.7 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803
Version 1.6 Oct 8, 2025, 6:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510081853
Version 1.3 Sep 8, 2025, 1:52 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509080152
Version 1.2 Sep 5, 2025, 7:39 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 4.7) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2025-38617") CVSSv2 severity (based on CVE-2025-38617, severity decreased from "High" to "Medium") CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509050739
Version 1.1 Sep 2, 2025, 6:30 AM New Plugin Feed: 202509020630