The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: ath12k: Correct tid cleanup when tid setup fails Currently, if any error occurs during     ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is     not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which     might leads to freeing unallocated TID and cause potential crash or out-of-bounds access. Hence, fix by     correctly decrementing tid before cleanup to match only the successfully allocated TIDs. Also, remove     tid-- from failure case of ath12k_dp_rx_peer_frag_setup(), as decrementing the tid before cleanup in loop     will take care of this. Compile tested only. (CVE-2025-39750)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39750

medium Nessus Plugin ID 264717

Version 1.9

Version 1.8

Version 1.7

Version 1.3

Version 1.1

Version 1.9 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.7 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.3 Sep 17, 2025, 9:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509170914
Version 1.1 Sep 14, 2025, 2:50 PM New Plugin Feed: 202509141450