The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfs: Fix unbuffered write error handling If all the subrequests in an unbuffered write stream fail, the     subrequest collector doesn't update the stream->transferred value and it retains its initial LONG_MAX     value. Unfortunately, if all active streams fail, then we take the smallest value of { LONG_MAX, LONG_MAX,     ... } as the value to set in wreq->transferred - which is then returned from ->write_iter(). LONG_MAX was     chosen as the initial value so that all the streams can be quickly assessed by taking the smallest value     of all stream->transferred - but this only works if we've set any of them. Fix this by adding a flag to     indicate whether the value in stream->transferred is valid and checking that when we integrate the values.
    stream->transferred can then be initialised to zero. This was found by running the generic/750 xfstest     against cifs with cache=none. It splices data to the target file. Once (if) it has used up all the     available scratch space, the writes start failing with ENOSPC. This causes ->write_iter() to fail.
    However, it was returning wreq->transferred, i.e. LONG_MAX, rather than an error (because it thought the     amount transferred was non-zero) and iter_file_splice_write() would then try to clean up that amount of     pipe bufferage - leading to an oops when it overran. The kernel log showed: CIFS: VFS: Send error in write     = -28 followed by: BUG: kernel NULL pointer dereference, address: 0000000000000008 with: RIP:
    0010:iter_file_splice_write+0x3a4/0x520 do_splice+0x197/0x4e0 or: RIP: 0010:pipe_buf_release     (include/linux/pipe_fs_i.h:282) iter_file_splice_write (fs/splice.c:755) Also put a warning check into     splice to announce if ->write_iter() returned that it had written more than it was asked to.
    (CVE-2025-39723)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39723

high Nessus Plugin ID 261603

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.6

Version 1.5

Version 1.1

Version 1.15 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.14 Feb 4, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602040631
Version 1.13 Feb 3, 2026, 10:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602032227
Version 1.12 Jan 10, 2026, 7:58 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.11 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.10 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.9 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.6 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.5 Sep 21, 2025, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509210829
Version 1.1 Sep 6, 2025, 7:55 PM New Plugin Feed: 202509061955