The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or we risk stealing final     mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but     before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly     undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown     mntput(). Check under mount_lock is needed; leaving the current one done before taking that makes no sense
    - it's nowhere near common enough to bother with. (CVE-2025-38058)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38058

high Nessus Plugin ID 260511

Version 1.12