The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Revert drm/gem-dma: Use dma_buf from GEM object instance This reverts commit     e8afa1557f4f963c9a511bd2c6074a941c308685. The dma_buf field in struct drm_gem_object is not stable over     the object instance's lifetime. The field becomes NULL when user space releases the final GEM handle on     the buffer object. This resulted in a NULL-pointer deref. Workarounds in commit 5307dce878d4 (drm/gem:
    Acquire references on GEM handles for framebuffers) and commit f6bfc9afc751 (drm/framebuffer: Acquire     internal references on GEM handles) only solved the problem partially. They especially don't work for     buffer objects without a DRM framebuffer associated. Hence, this revert to going back to using     .import_attach->dmabuf. v3: - cc stable (CVE-2025-38672)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38672

medium Nessus Plugin ID 260425

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.9 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.8 Dec 15, 2025, 9:39 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.7 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.6 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
Version 1.5 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.2 Sep 14, 2025, 2:50 PM CVSS metrics ("CVSSv2 score" set to 7.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2025-38672, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509141450
Version 1.1 Sep 2, 2025, 3:13 PM New Plugin Feed: 202509021513