The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FPU enabled,     reading /proc/[kthread]/arch_status causes a warning and a NULL pointer dereference. This is because the     AVX-512 timestamp code uses x86_task_fpu() but doesn't check it for NULL. CONFIG_X86_DEBUG_FPU addles that     function for kernel threads (PF_KTHREAD specifically), making it return NULL. The point of the warning was     to ensure that kernel threads only access task->fpu after going through kernel_fpu_begin()/_end(). Note:
    all kernel tasks exposed in /proc have a valid task->fpu. Solution -------- One option is to silence the     warning and check for NULL from x86_task_fpu(). However, that warning is fairly fresh and seems like a     defense against misuse of the FPU state in kernel threads. Instead, stop outputting AVX-512_elapsed_ms for     kernel threads altogether. The data was garbage anyway because avx512_timestamp is only updated for user     threads, not kernel threads. If anyone ever wants to track kernel thread AVX-512 use, they can come back     later and do it properly, separate from this bug fix. [ dhansen: mostly rewrite changelog ]     (CVE-2025-38689)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38689

medium Nessus Plugin ID 264697

Version 1.5

Version 1.4

Version 1.1

Version 1.5 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.4 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.1 Sep 14, 2025, 2:50 PM New Plugin Feed: 202509141450