The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver     are missing a mei_cldev_disable() call in their remove() function. This causes the mei_cl client to stay     part of the mei_device->file_list list even though its memory is freed by mei_cl_bus_dev_release() calling     kfree(cldev->cl). This leads to a use-after-free when mei_vsc_remove() runs mei_stop() which first removes     all mei bus devices calling mei_ace_remove() and mei_csi_remove() followed by mei_cl_bus_dev_release() and     then calls mei_cl_all_disconnect() which walks over mei_device->file_list dereferecing the just freed     cldev->cl. And mei_vsc_remove() it self is run at shutdown because of the     platform_device_unregister(tp->pdev) in vsc_tp_shutdown() When building a kernel with KASAN this leads to     the following KASAN report: [ 106.634504]     ================================================================== [ 106.634623] BUG: KASAN: slab-use-     after-free in mei_cl_set_disconnected (drivers/misc/mei/client.c:783) mei [ 106.634683] Read of size 4 at     addr ffff88819cb62018 by task systemd-shutdow/1 [ 106.634729] [ 106.634767] Tainted: [E]=UNSIGNED_MODULE [     106.634770] Hardware name: Dell Inc. XPS 16 9640/09CK4V, BIOS 1.12.0 02/10/2025 [ 106.634773] Call Trace:
    [ 106.634777] <TASK> ... [ 106.634871] kasan_report (mm/kasan/report.c:221 mm/kasan/report.c:636) [     106.634901] mei_cl_set_disconnected (drivers/misc/mei/client.c:783) mei [ 106.634921]     mei_cl_all_disconnect (drivers/misc/mei/client.c:2165 (discriminator 4)) mei [ 106.634941] mei_reset     (drivers/misc/mei/init.c:163) mei ... [ 106.635042] mei_stop (drivers/misc/mei/init.c:348) mei [     106.635062] mei_vsc_remove (drivers/misc/mei/mei_dev.h:784 drivers/misc/mei/platform-vsc.c:393) mei_vsc [     106.635066] platform_remove (drivers/base/platform.c:1424) Add the missing mei_cldev_disable() calls so     that the mei_cl gets removed from mei_device->file_list before it is freed to fix this. (CVE-2025-39711)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39711

high Nessus Plugin ID 261605

Version 1.18

Version 1.17

Version 1.16

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.1

Version 1.18 Feb 14, 2026, 1:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602140112
Version 1.17 Feb 12, 2026, 3:03 PM Detection (updated detection logic) Plugin Feed: 202602121503
Version 1.16 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.15 Jan 30, 2026, 10:33 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601302233
Version 1.14 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.13 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.12 Dec 19, 2025, 2:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512190241
Version 1.11 Dec 15, 2025, 9:39 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.10 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.6 Sep 30, 2025, 12:41 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSSv2 severity (based on CVE-2025-39711, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509300041
Version 1.5 Sep 21, 2025, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509210829
Version 1.1 Sep 6, 2025, 7:55 PM New Plugin Feed: 202509061955