The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't     jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c     client can hang the kernel in this case and should be avoided. This is observed during a long time test     with a PCA953x GPIO extender. Fix it by changing the logic to not only sets the return value, but also     jumps out of the loop and return to the caller with -ETIMEDOUT. (CVE-2025-38671)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38671

medium Nessus Plugin ID 260265

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.13 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.12 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.11 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511242208
Version 1.10 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.9 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
Version 1.8 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356