The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/msm: Add error handling for krealloc in metadata setup Function msm_ioctl_gem_info_set_metadata() now     checks for krealloc failure and returns -ENOMEM, avoiding potential NULL pointer dereference. Explicitly     avoids __GFP_NOFAIL due to deadlock risks and allocation constraints. Patchwork:
    https://patchwork.freedesktop.org/patch/661235/ (CVE-2025-39747)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39747

medium Nessus Plugin ID 264747

Version 1.7

Version 1.6

Version 1.2

Version 1.1

Version 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.6 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.2 Sep 17, 2025, 9:14 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2025-39747, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509170914
Version 1.1 Sep 14, 2025, 2:50 PM New Plugin Feed: 202509141450